tocsin

Debian/dovecot: unknown

Directory traversal vulnerability in the ManageSieve implementation in Dovecot 1.0.15, 1.1, and 1.2 allows remote attackers to read and modify arbitrary .sieve files via a ".." (dot dot) in a script n

Action: Upgrade dovecot to 1:1.0.15-2.3 or later.

Affected

introducedfixedlast affected
01:1.0.15-2.3-

Fixed versions

1:1.0.15-2.3

Sources

published · modified · JSON