Dovecot ManageSieve Service '.sieve' Files Directory Traversal Vulnerability

Dovecot ManageSieve Service '.sieve' Files Directory Traversal Vulnerability

Solution:
The vendor has released an update. Please see the references for details.

Ubuntu Ubuntu Linux 8.10 lpia

Ubuntu dovecot-common_1.1.4-0ubuntu1.3_lpia.deb
http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-common_1.1.4-0ubun tu1.3_lpia.deb

Ubuntu dovecot-dev_1.1.4-0ubuntu1.3_lpia.deb
http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-dev_1.1.4-0ubuntu1 .3_lpia.deb

Ubuntu dovecot-imapd_1.1.4-0ubuntu1.3_lpia.deb
http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-imapd_1.1.4-0ubunt u1.3_lpia.deb

Ubuntu dovecot-pop3d_1.1.4-0ubuntu1.3_lpia.deb
http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-pop3d_1.1.4-0ubunt u1.3_lpia.deb

Ubuntu Ubuntu Linux 9.04 i386

Ubuntu dovecot-common_1.1.11-0ubuntu4.1_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-common_1 .1.11-0ubuntu4.1_i386.deb

Ubuntu dovecot-dev_1.1.11-0ubuntu4.1_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-dev_1.1. 11-0ubuntu4.1_i386.deb

Ubuntu dovecot-imapd_1.1.11-0ubuntu4.1_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-imapd_1. 1.11-0ubuntu4.1_i386.deb

Ubuntu dovecot-pop3d_1.1.11-0ubuntu4.1_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-pop3d_1. 1.11-0ubuntu4.1_i386.deb

Ubuntu dovecot-postfix_1.1.11-0ubuntu4.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-postfix_ 1.1.11-0ubuntu4.1_all.deb

Ubuntu Ubuntu Linux 8.04 LTS powerpc

Ubuntu dovecot-common_1.0.10-1ubuntu5.2_powerpc.deb
http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-common_1.0.10-1ubu ntu5.2_powerpc.deb

Ubuntu dovecot-dev_1.0.10-1ubuntu5.2_powerpc.deb
http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-dev_1.0.10-1ubuntu 5.2_powerpc.deb

Ubuntu dovecot-imapd_1.0.10-1ubuntu5.2_powerpc.deb
http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-imapd_1.0.10-1ubun tu5.2_powerpc.deb

Ubuntu dovecot-pop3d_1.0.10-1ubuntu5.2_powerpc.deb
http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-pop3d_1.0.10-1ubun tu5.2_powerpc.deb

Ubuntu Ubuntu Linux 9.04 lpia

Ubuntu dovecot-common_1.1.11-0ubuntu4.1_lpia.deb
http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-common_1.1.11-0ubu ntu4.1_lpia.deb

Ubuntu dovecot-dev_1.1.11-0ubuntu4.1_lpia.deb
http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-dev_1.1.11-0ubuntu 4.1_lpia.deb

Ubuntu dovecot-imapd_1.1.11-0ubuntu4.1_lpia.deb
http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-imapd_1.1.11-0ubun tu4.1_lpia.deb

Ubuntu dovecot-pop3d_1.1.11-0ubuntu4.1_lpia.deb
http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-pop3d_1.1.11-0ubun tu4.1_lpia.deb

Ubuntu dovecot-postfix_1.1.11-0ubuntu4.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-postfix_ 1.1.11-0ubuntu4.1_all.deb

Ubuntu Ubuntu Linux 8.10 sparc

Ubuntu dovecot-common_1.1.4-0ubuntu1.3_sparc.deb
http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-common_1.1.4-0ubun tu1.3_sparc.deb

Ubuntu dovecot-dev_1.1.4-0ubuntu1.3_sparc.deb
http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-dev_1.1.4-0ubuntu1 .3_sparc.deb

Ubuntu dovecot-imapd_1.1.4-0ubuntu1.3_sparc.deb
http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-imapd_1.1.4-0ubunt u1.3_sparc.deb

Ubuntu dovecot-pop3d_1.1.4-0ubuntu1.3_sparc.deb
http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-pop3d_1.1.4-0ubunt u1.3_sparc.deb

Ubuntu Ubuntu Linux 8.10 powerpc

Ubuntu dovecot-common_1.1.4-0ubuntu1.3_powerpc.deb
http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-common_1.1.4-0ubun tu1.3_powerpc.deb

Ubuntu dovecot-dev_1.1.4-0ubuntu1.3_powerpc.deb
http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-dev_1.1.4-0ubuntu1 .3_powerpc.deb

Ubuntu dovecot-imapd_1.1.4-0ubuntu1.3_powerpc.deb
http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-imapd_1.1.4-0ubunt u1.3_powerpc.deb

Ubuntu dovecot-pop3d_1.1.4-0ubuntu1.3_powerpc.deb
http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-pop3d_1.1.4-0ubunt u1.3_powerpc.deb

Ubuntu Ubuntu Linux 8.04 LTS sparc

Ubuntu dovecot-common_1.0.10-1ubuntu5.2_sparc.deb
http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-common_1.0.10-1ubu ntu5.2_sparc.deb

Ubuntu dovecot-dev_1.0.10-1ubuntu5.2_sparc.deb
http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-dev_1.0.10-1ubuntu 5.2_sparc.deb

Ubuntu dovecot-imapd_1.0.10-1ubuntu5.2_sparc.deb
http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-imapd_1.0.10-1ubun tu5.2_sparc.deb

Ubuntu dovecot-pop3d_1.0.10-1ubuntu5.2_sparc.deb
http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-pop3d_1.0.10-1ubun tu5.2_sparc.deb

Ubuntu Ubuntu Linux 8.10 i386

Ubuntu dovecot-common_1.1.4-0ubuntu1.3_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-common_1 .1.4-0ubuntu1.3_i386.deb

Ubuntu dovecot-dev_1.1.4-0ubuntu1.3_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-dev_1.1. 4-0ubuntu1.3_i386.deb

Ubuntu dovecot-imapd_1.1.4-0ubuntu1.3_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-imapd_1. 1.4-0ubuntu1.3_i386.deb

Ubuntu dovecot-pop3d_1.1.4-0ubuntu1.3_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-pop3d_1. 1.4-0ubuntu1.3_i386.deb

Ubuntu Ubuntu Linux 8.04 LTS i386

Ubuntu dovecot-common_1.0.10-1ubuntu5.2_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-common_1 .0.10-1ubuntu5.2_i386.deb

Ubuntu dovecot-dev_1.0.10-1ubuntu5.2_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-dev_1.0. 10-1ubuntu5.2_i386.deb

Ubuntu dovecot-imapd_1.0.10-1ubuntu5.2_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-imapd_1. 0.10-1ubuntu5.2_i386.deb

Ubuntu dovecot-pop3d_1.0.10-1ubuntu5.2_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-pop3d_1. 0.10-1ubuntu5.2_i386.deb

Ubuntu Ubuntu Linux 8.04 LTS amd64

Ubuntu dovecot-common_1.0.10-1ubuntu5.2_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-common_1 .0.10-1ubuntu5.2_amd64.deb

Ubuntu dovecot-dev_1.0.10-1ubuntu5.2_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-dev_1.0. 10-1ubuntu5.2_amd64.deb

Ubuntu dovecot-imapd_1.0.10-1ubuntu5.2_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-imapd_1. 0.10-1ubuntu5.2_amd64.deb

Ubuntu dovecot-pop3d_1.0.10-1ubuntu5.2_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-pop3d_1. 0.10-1ubuntu5.2_amd64.deb

Ubuntu Ubuntu Linux 9.04 amd64

Ubuntu dovecot-common_1.1.11-0ubuntu4.1_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-common_1 .1.11-0ubuntu4.1_amd64.deb

Ubuntu dovecot-dev_1.1.11-0ubuntu4.1_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-dev_1.1. 11-0ubuntu4.1_amd64.deb

Ubuntu dovecot-imapd_1.1.11-0ubuntu4.1_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-imapd_1. 1.11-0ubuntu4.1_amd64.deb

Ubuntu dovecot-pop3d_1.1.11-0ubuntu4.1_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-pop3d_1. 1.11-0ubuntu4.1_amd64.deb

Ubuntu dovecot-postfix_1.1.11-0ubuntu4.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-postfix_ 1.1.11-0ubuntu4.1_all.deb

Ubuntu Ubuntu Linux 9.04 sparc

Ubuntu dovecot-common_1.1.11-0ubuntu4.1_sparc.deb
http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-common_1.1.11-0ubu ntu4.1_sparc.deb

Ubuntu dovecot-dev_1.1.11-0ubuntu4.1_sparc.deb
http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-dev_1.1.11-0ubuntu 4.1_sparc.deb

Ubuntu dovecot-imapd_1.1.11-0ubuntu4.1_sparc.deb
http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-imapd_1.1.11-0ubun tu4.1_sparc.deb

Ubuntu dovecot-pop3d_1.1.11-0ubuntu4.1_sparc.deb
http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-pop3d_1.1.11-0ubun tu4.1_sparc.deb

Ubuntu dovecot-postfix_1.1.11-0ubuntu4.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-postfix_ 1.1.11-0ubuntu4.1_all.deb

Ubuntu Ubuntu Linux 8.10 amd64

Ubuntu dovecot-common_1.1.4-0ubuntu1.3_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-common_1 .1.4-0ubuntu1.3_amd64.deb

Ubuntu dovecot-dev_1.1.4-0ubuntu1.3_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-dev_1.1. 4-0ubuntu1.3_amd64.deb

Ubuntu dovecot-imapd_1.1.4-0ubuntu1.3_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-imapd_1. 1.4-0ubuntu1.3_amd64.deb

Ubuntu dovecot-pop3d_1.1.4-0ubuntu1.3_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-pop3d_1. 1.4-0ubuntu1.3_amd64.deb

Ubuntu Ubuntu Linux 9.04 powerpc

Ubuntu dovecot-common_1.1.11-0ubuntu4.1_powerpc.deb
http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-common_1.1.11-0ubu ntu4.1_powerpc.deb

Ubuntu dovecot-dev_1.1.11-0ubuntu4.1_powerpc.deb
http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-dev_1.1.11-0ubuntu 4.1_powerpc.deb

Ubuntu dovecot-imapd_1.1.11-0ubuntu4.1_powerpc.deb
http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-imapd_1.1.11-0ubun tu4.1_powerpc.deb

Ubuntu dovecot-pop3d_1.1.11-0ubuntu4.1_powerpc.deb
http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-pop3d_1.1.11-0ubun tu4.1_powerpc.deb

Ubuntu dovecot-postfix_1.1.11-0ubuntu4.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-postfix_ 1.1.11-0ubuntu4.1_all.deb

Ubuntu Ubuntu Linux 8.04 LTS lpia

Ubuntu dovecot-common_1.0.10-1ubuntu5.2_lpia.deb
http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-common_1.0.10-1ubu ntu5.2_lpia.deb

Ubuntu dovecot-dev_1.0.10-1ubuntu5.2_lpia.deb
http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-dev_1.0.10-1ubuntu 5.2_lpia.deb

Ubuntu dovecot-imapd_1.0.10-1ubuntu5.2_lpia.deb
http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-imapd_1.0.10-1ubun tu5.2_lpia.deb

Ubuntu dovecot-pop3d_1.0.10-1ubuntu5.2_lpia.deb
http://ports.ubuntu.com/pool/main/d/dovecot/dovecot-pop3d_1.0.10-1ubun tu5.2_lpia.deb