The initscripts package in Red Hat Linux allows local users to gain privileges via a symlink attack.
redhat linux 6.1
redhat linux 6.0