PADL MigrationTools 46 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the temporary files, which are not properly created by (1) migrateallonline.sh, (2) migratealloffline.sh, (3) migrateallnetinfoonline.sh, (4) migrateallnetinfooffline.sh, (5) migrateallnisonline.sh, (6) migrateallnisoffline.sh, (7) migrateallnisplusonline.sh, and (8) migrateallnisplusoffline.sh.