Unrated severityNVD Advisory· Published Dec 1, 2008· Updated Jun 16, 2026
CVE-2008-5301
CVE-2008-5301
Description
Directory traversal vulnerability in the ManageSieve implementation in Dovecot 1.0.15, 1.1, and 1.2 allows remote attackers to read and modify arbitrary .sieve files via a ".." (dot dot) in a script name.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
22cpe:2.3:a:dovecot:dovecot:0.99.13:*:*:*:*:*:*:*+ 21 more
- cpe:2.3:a:dovecot:dovecot:0.99.13:*:*:*:*:*:*:*
- cpe:2.3:a:dovecot:dovecot:0.99.14:*:*:*:*:*:*:*
- cpe:2.3:a:dovecot:dovecot:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:dovecot:dovecot:1.0.10:*:*:*:*:*:*:*
- cpe:2.3:a:dovecot:dovecot:1.0.12:*:*:*:*:*:*:*
- cpe:2.3:a:dovecot:dovecot:1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:dovecot:dovecot:1.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:dovecot:dovecot:1.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:dovecot:dovecot:1.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:dovecot:dovecot:1.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:dovecot:dovecot:1.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:dovecot:dovecot:1.0.8:*:*:*:*:*:*:*
- cpe:2.3:a:dovecot:dovecot:1.0.9:*:*:*:*:*:*:*
- cpe:2.3:a:dovecot:dovecot:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:dovecot:dovecot:1.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:dovecot:dovecot:1.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:dovecot:dovecot:1.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:dovecot:dovecot:1.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:dovecot:dovecot:1.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:dovecot:dovecot:1.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:dovecot:dovecot:1.1:rc2:*:*:*:*:*:*
- (no CPE)range: <=1.2
Patches
Vulnerability mechanics
References
7- www.dovecot.org/list/dovecot/2008-November/035259.htmlnvdPatch
- secunia.com/advisories/32768nvdVendor Advisory
- secunia.com/advisories/36904nvd
- www.securityfocus.com/bid/32582nvd
- www.ubuntu.com/usn/USN-838-1nvd
- www.vupen.com/english/advisories/2008/3190nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/46672nvd
News mentions
0No linked articles in our index yet.