CVE-2004-0552 Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device names such as (1) LPT1, (2) COM1, (3) AUX, (4) CON, or (5) PRN, which can allow ma...
HighCVSS 7.5
EPSS 23.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device names such as (1) LPT1, (2) COM1, (3) AUX, (4) CON, or (5) PRN, which can allow malicious code to bypass detection when it is installed, copied, or executed.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sophos small business suite | <= 1.00 | No fix listed |
References
- 20040922 Sophos Small Business Suite Reserved Device Name Handling Vulnerability third-party-advisory
- www.seifried.org exploit patch vendor-advisory
- sophos-business-security-bypass(17468) vdb-entry