CVE-2008-5301

CVE-2008-5301 affects the Dovecot ManageSieve component with versions 1.0.15, 1.1, and 1.2. The vulnerability is a directory traversal: an attacker can supply a script name containing ".." to read and modify arbitrary .sieve files on the server. This is the explicit root cause identified in the c...