The kernel in FreeBSD 3.2 follows symbolic links when it creates core dump files, which allows local malicious users to modify arbitrary files.
freebsd freebsd 3.2