CVE-2012-2087

Impact

ISPConfig 3.0.4.3: the "Add new Webdav user" can chmod and chown entire server from client interface.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://www.openwall.com/lists/oss-security/2012/04/08/3
• http://www.openwall.com/lists/oss-security/2012/04/09/4
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74739
• https://www.securityfocus.com/bid/52936
• http://www.openwall.com/lists/oss-security/2012/04/08/3
• http://www.openwall.com/lists/oss-security/2012/04/09/4
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74739
• https://www.securityfocus.com/bid/52936