ISPConfig 3.0.4.3: the "Add new Webdav user" can chmod and chown entire server from client interface.
ISPConfig
Exploit
CVE-2012-2087
NVD
Refer to CVE-2012-2087 NVD advisory