dovecot-managesieve -- Script Name Directory Traversal Vulnerability

Secunia reports:

The security issue is caused due to an input validation error when processing script names. This can be exploited to read or modify arbitrary files having ".sieve" extensions via directory traversal attacks, with the privileges of the attacker's user id.

[source]