CVE-2011-2185

Fabric before 1.1.0 is vulnerable to a local-symlink attack that lets local users overwrite arbitrary files. The issue arises from symlinks pointing to files in /tmp (notably /tmp/fab.*.tar) or other top-level /tmp paths during Fabric operations, enabling modification of target files by an attack...