Lucene search
HistoryDec 01, 2008 - 5:30 p.m.
CVE-2008-5301
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
7.4 High
AI Score
Confidence
High
0.006 Low
EPSS
Percentile
77.9%
Directory traversal vulnerability in the ManageSieve implementation in Dovecot 1.0.15, 1.1, and 1.2 allows remote attackers to read and modify arbitrary .sieve files via a “…” (dot dot) in a script name.
Affected configurations
Node
dovecotdovecotMatch0.99.13
ORdovecotdovecotMatch0.99.14
ORdovecotdovecotMatch1.0
ORdovecotdovecotMatch1.0.2
ORdovecotdovecotMatch1.0.3
ORdovecotdovecotMatch1.0.4
ORdovecotdovecotMatch1.0.5
ORdovecotdovecotMatch1.0.6
ORdovecotdovecotMatch1.0.7
ORdovecotdovecotMatch1.0.8
ORdovecotdovecotMatch1.0.9
ORdovecotdovecotMatch1.0.10
ORdovecotdovecotMatch1.0.12
ORdovecotdovecotMatch1.1
ORdovecotdovecotMatch1.1rc2
ORdovecotdovecotMatch1.1.0
ORdovecotdovecotMatch1.1.1
ORdovecotdovecotMatch1.1.2
ORdovecotdovecotMatch1.1.3
ORdovecotdovecotMatch1.1.4
ORdovecotdovecotMatch1.1.5
Related
redhatcve
redhatcve
CVE-2008-5301
2015-10-30 09:38:54
debiancve
debiancve
CVE-2008-5301
2008-12-01 17:30:01
freebsd
freebsd
dovecot-managesieve -- Script Name Directory Traversal Vulnerability
2008-11-18 00:00:00
nessus
nessus
cve
cve
CVE-2008-5301
2008-12-01 17:30:01
openvas
openvas
FreeBSD Ports: dovecot-managesieve
2008-12-10 00:00:00
FreeBSD Ports: dovecot-managesieve
2008-12-10 00:00:00
Ubuntu: Security Advisory (USN-838-1)
2009-10-06 00:00:00
ubuntucve
ubuntucve
CVE-2008-5301
2008-12-01 00:00:00
prion
prion
Directory traversal
2008-12-01 17:30:00
cvelist
cvelist
CVE-2008-5301
2008-12-01 17:00:00
ubuntu
ubuntu
Dovecot vulnerabilities
2009-09-28 00:00:00
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
7.4 High
AI Score
Confidence
High
0.006 Low
EPSS
Percentile
77.9%
Related for NVD:CVE-2008-5301