Dovecot: >> Dovecot >> 1.0.12 Security Vulnerabilities
Directory traversal vulnerability in the ManageSieve implementation in Dovecot 1.0.15, 1.1, and 1.2 allows remote attackers to read and modify arbitrary .sieve files via a ".." (dot dot) in a script name.
CVSS Score
6.4
EPSS Score
0.006
Published
2008-12-01
The ACL plugin in Dovecot before 1.1.4 allows attackers to bypass intended access restrictions by using the "k" right to create unauthorized "parent/child/child" mailboxes.
CVSS Score
5.0
EPSS Score
0.008
Published
2008-10-15