CVE-2008-5301: Dovecot

Medium severity, CVSS 6.4. EPSS: 1.8% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the ManageSieve implementation in Dovecot 1.0.15, 1.1, and 1.2 allows remote attackers to read and modify arbitrary .sieve files via a ".." (dot dot) in a script name.

Affected products

• Dovecot Dovecot: version 0.99.13 only; version 0.99.14 only; version 1.0 only; version 1.0.2 only; version 1.0.3 only; version 1.0.4 only; …

Published 2008-12-01. Last modified 2026-06-16.