earlier could allow local users to delete files and directories (as the user running fileutils) if the user has write access to part of the tree being moved or deleted. http://online.securityfocus.com/archive/1/260936