VMware Workstation 4.0.1 for Linux, build 5289 and previous versions, allows local users to delete arbitrary files via a symlink attack.
vmware workstation