#1 Linux version symlink attack

[Oohara Yuuma]

The Linux version of gf1 creates its configuration
file "gf1.cfg" in the current directory, not in
the user's home directory. When there is already
a file named "gf1.cfg", gf1 overwrites it without
any warning. If the current directory is
world-writable
(for example, /tmp), gf1 is subject to a symlink
attack. In other words, a cracker can destroy
a user's file by creating a symlink named "gf1.cfg"
in the user's current directory.

system information
I compiled gf1 from the source "gf1_src_103.zip".
I am running Debian/GNU Linux.
Linux spice 2.2.19 #1 Sun Jun 17 15:29:48 JST 2001 i686
unknown

ii libc6 2.1.3-19 GNU C Library: Shared
libraries and Timezone
ii libfltk1 1.0.7-1 The Fast Light
Toolkit, a GUI toolkit inspir
ii libggi2 1.99.2.0b2.1-2 General Graphics
Interface runtime libraries
ii libgii0 0.6-1.1 General Input
Interface runtime libraries
ii libstdc++2.10 2.95.2-13 The GNU stdc++
library
ii mesag3+ggi 3.1-17 A 3-D graphics
library which uses the OpenGL
ii xlib6g 3.3.6-11potato shared libraries
required by X clients

ii gcc 2.95.2-13 The GNU C compiler.
ii libc6-dev 2.1.3-19 GNU C Library:
Development Libraries and Hea
ii libfltk-dev 1.0.7-1 The Fast Light
Toolkit, and the Fluid user
ii libstdc++2.10- 2.95.2-13 The GNU stdc++
library (development files)
ii make 3.79.1-1.potat The GNU version of
the "make" utility.