Directory traversal vulnerability in the ManageSieve implementation in Dovecot 1.0.15 1.1 and 1.2 allows remote attackers to read and modify arbitrary .sieve files via a \..\ (dot dot) in a script name.