virtualenv.py in virtualenv before 1.5 allows local users to overwrite arbitrary files via a symlink attack on a certain file in /tmp/. (CVSS:1.2) (Last Update:2012-01-31)