CVE-2008-5301

EPSS 0.57%

Published: 12/1/2008Modified: 4/28/2026

Also known as:DEBIAN-CVE-2008-5301

Description

Directory traversal vulnerability in the ManageSieve implementation in Dovecot 1.0.15, 1.1, and 1.2 allows remote attackers to read and modify arbitrary .sieve files via a ".." (dot dot) in a script name.

Affected packages (1)

Debian/dovecotfrom 0, < 1:1.0.15-2.3

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2008-5301