FreeBSD : dovecot-managesieve -- Script Name Directory Traversal Vulnerability (3efc106e-c451-11dd-a721-0030843d3802)
Medium Nessus Plugin ID 35053
The remote FreeBSD host is missing one or more security-related updates.
Secunia reports : The security issue is caused due to an input validation error when processing script names. This can be exploited to read or modify arbitrary files having '.sieve' extensions via directory traversal attacks, with the privileges of the attacker's user id.