Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network.