MEDIUM5.5CVE-2010-4817pithos before 0.3.5 allows overwrite of arbitrary files via symlinks.
from 0, < 0.3.5-1
—CVE-2011-1500PreferencesPithosDialog.py in Pithos 0.3.7 does not properly restrict permissions for the .config/pithos.ini file in a user's home director…