medium6.4
CVE-2008-5301
Directory traversal vulnerability in the ManageSieve implementation in Dovecot 1.0.15, 1.1, and 1.2 allows remote attackers to read and modify arbitrary .sieve…
Impact
Directory traversal vulnerability in the ManageSieve implementation in Dovecot 1.0.15, 1.1, and 1.2 allows remote attackers to read and modify arbitrary .sieve files via a ".." (dot dot) in a script name.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dovecot | Dovecot | Versions 0.99.13, 0.99.14, 1.0, 1.0.2, 1.0.3, 1.0.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/32768
- http://secunia.com/advisories/36904
- http://www.dovecot.org/list/dovecot/2008-November/035259.html
- http://www.securityfocus.com/bid/32582
- http://www.ubuntu.com/usn/USN-838-1
- http://www.vupen.com/english/advisories/2008/3190
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46672
- http://secunia.com/advisories/32768
- http://secunia.com/advisories/36904
- http://www.dovecot.org/list/dovecot/2008-November/035259.html
- http://www.securityfocus.com/bid/32582
- http://www.ubuntu.com/usn/USN-838-1
- http://www.vupen.com/english/advisories/2008/3190
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46672