PHP Improper Link Resolution Before File Access (Link Following) Vulnerability - CVE-2014-3981
acinclude.m4 as used in the configure script in PHP 5.5.13 and earlier allows local users to overwrite arbitrary files via a symlink attack on the /tmp/phpglibccheck file.