Lucene search
HistoryDec 01, 2008 - 5:30 p.m.
CVE-2008-5301
cve-2008-5301
directory traversal
managesieve
dovecot 1.0.15
dovecot 1.1
dovecot 1.2
remote attackers
6.5 Medium
AI Score
Confidence
Low
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.006 Low
EPSS
Percentile
77.5%
Directory traversal vulnerability in the ManageSieve implementation in Dovecot 1.0.15, 1.1, and 1.2 allows remote attackers to read and modify arbitrary .sieve files via a “…” (dot dot) in a script name.
Related
openvas
openvas
FreeBSD Ports: dovecot-managesieve
2008-12-10 00:00:00
FreeBSD Ports: dovecot-managesieve
2008-12-10 00:00:00
Ubuntu USN-838-1 (dovecot)
2009-10-06 00:00:00
debiancve
debiancve
CVE-2008-5301
2008-12-01 17:30:00
prion
prion
Directory traversal
2008-12-01 17:30:00
ubuntucve
ubuntucve
CVE-2008-5301
2008-12-01 00:00:00
nessus
nessus
freebsd
freebsd
dovecot-managesieve -- Script Name Directory Traversal Vulnerability
2008-11-18 00:00:00
ubuntu
ubuntu
Dovecot vulnerabilities
2009-09-28 00:00:00
6.5 Medium
AI Score
Confidence
Low
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.006 Low
EPSS
Percentile
77.5%
Related for CVE-2008-5301