A malicious user can cause log files to be written to a directory that they do not have permission to write to.