← Database

CVE-2008-5301

MEDIUM CVSS: 6.4 Published: 2008-12-01 Modified: 2026-06-16

Description

Directory traversal vulnerability in the ManageSieve implementation in Dovecot 1.0.15, 1.1, and 1.2 allows remote attackers to read and modify arbitrary .sieve files via a ".." (dot dot) in a script name.

Affected Platforms

Dovecot Dovecot

Weakness Type

CWE-22

References