Lynx allows a local user to overwrite sensitive files through /tmp symlinks.
university of kansas lynx