core files are created in world-writable /core directory without symbolic links check.
vulners.com/securityvulns/securityvulns:doc:5315