opensuse-updater in openSUSE 10.2 allows local users to access arbitrary files via a symlink attack.
opensuse opensuse 10.2