LVM for AIX 5.1 and 5.2 allows local users to overwrite arbitrary files via a symlink attack.
ibm aix 5.1
ibm aix 5.2