Midnight Commander 4.5.xx when executed creates a file under /tmp called talk.fish with the permissions of 644 (-rw-r--r--), a malicious user could link this to any file, for example /etc/passwd.
A malicious user could like a /tmp file called talk.fish to /etc/passwd causing it to overwrite /etc/passwd when the root user executes Midnight Commander.
