Debian Linux Security Advisory 2765-1 – Davfs2, a filesystem client for WebDAV, calls the function system() insecurely while is setuid root. This might allow a privilege escalation…. Debian Linux Security Advisory 2765-1 – Davfs2, a filesystem client for WebDAV, calls the function system() insecurely while is setuid root. This might allow a privilege escalation.

Read more http://packetstormsecurity.com/files/123422/dsa-2765-1.txt