The apcd package as shipped in Debian GNU/Linux 2.1 is vulnerable to a symlink attack. Debian security homepage here.