Mandriva Linux Security Advisory 2011-069

Mandriva Linux Security Advisory 2011-069 – It was discovered that the /etc/cron.d/php cron job for php-session allows local users to delete arbitrary files via a symlink attack on a directory under /var/lib/php.

Source: Mandriva Linux Security Advisory 2011-069