Vulnerabilities > Dovecot > Dovecot > 1.0.12

DATE CVE VULNERABILITY TITLE RISK
2008-12-01 CVE-2008-5301 Path Traversal vulnerability in Dovecot
Directory traversal vulnerability in the ManageSieve implementation in Dovecot 1.0.15, 1.1, and 1.2 allows remote attackers to read and modify arbitrary .sieve files via a ".." (dot dot) in a script name.
network
low complexity
dovecot CWE-22
6.4
2008-10-15 CVE-2008-4578 Permissions, Privileges, and Access Controls vulnerability in Dovecot
The ACL plugin in Dovecot before 1.1.4 allows attackers to bypass intended access restrictions by using the "k" right to create unauthorized "parent/child/child" mailboxes.
network
low complexity
dovecot CWE-264
5.0