Race condition in Samba smbmnt allows local users to mount file systems in arbitrary locations.
samba samba 2.0.5