netpbm 9.25 and previous versions does not properly create temporary files, which allows local users to overwrite arbitrary files.
netpbm netpbm