CVE-2004-0552

Published: Nov 3, 2004Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device names such as (1) LPT1, (2) COM1, (3) AUX, (4) CON, or (5) PRN, which can allow malicious code to bypass detection when it is installed, copied, or executed.

Affected (1)

Products: Sophos: Small Business Suite

1 product

Small Business Suite

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Sophos Small Business Suite	Up to 1.00

References (6)

http://www.idefense.com/application/poi/display?id=143&type=vulnerabilities

Source: cve@mitre.org

http://www.seifried.org/security/advisories/kssa-005.html

Source: cve@mitre.org

ExploitPatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/17468

Source: cve@mitre.org

http://www.idefense.com/application/poi/display?id=143&type=vulnerabilities

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.seifried.org/security/advisories/kssa-005.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/17468

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.