{"action":"Upgrade dovecot to 1:1.0.15-2.3 or later.","affected":[{"fixed":"1:1.0.15-2.3","introduced":"0"}],"component":"dovecot","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["1:1.0.15-2.3"],"id":"tcs_01M5N95HA0VMBW9ENDKVWYJFYZ","modified_at":"2026-10-23T17:47:41.254614690Z","published_at":"2008-12-01T17:30:01.437Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2008-5301","https://security-tracker.debian.org/tracker/CVE-2008-5301"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2008-5301","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2008-5301"}],"summary":"Directory traversal vulnerability in the ManageSieve implementation in Dovecot 1.0.15, 1.1, and 1.2 allows remote attackers to read and modify arbitrary .sieve files via a \"..\" (dot dot) in a script n"}