WEB-DAV Linux File System (davfs2) 1.4.6 and 1.4.7 allow local users to gain privileges via unknown attack vectors in (1) kernelinterface.c and (2) mountdavfs.c, related to the "system" function.
{ "urgency": "not yet assigned" }