GNU ed prior to 0.2-18.1 allows local users to overwrite the files of other users via a symlink attack.
gnu ed 2.18
gnu ed 2.16tr
gnu ed 2.15
gnu ed 2.18.0