CVEvulnerability
CVE-2004-0552
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2004-11-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device names such as (1) LPT1, (2) COM1, (3) AUX, (4) CON, or (5) PRN, which can allow malicious code to bypass detection when it is installed, copied, or executed.
Affected configurations
• sophos small business suite (<= 1.00)
Related
Referenced by CWE · observed example (1)
- CWE-67 Improper Handling of Windows Device Names weakness
References
- http://www.idefense.com/application/poi/display?id=143&type=vulnerabilities www.idefense.com
- http://www.seifried.org/security/advisories/kssa-005.html Exploit, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17468 exchange.xforce.ibmcloud.com
- http://www.idefense.com/application/poi/display?id=143&type=vulnerabilities www.idefense.com
- http://www.seifried.org/security/advisories/kssa-005.html Exploit, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17468 exchange.xforce.ibmcloud.com