CVE-2008-5146 in ctn
Summary
add-accession-numbers in ctn 3.0.6 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/accession temporary file.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.