CVE-2004-0552

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

23.87%

Published

Nov 3, 2004

Modified

Jun 16, 2026

Public PoC / Exploit (1)

All weaponized →

Exploit-DBSophos Anti-Virus 3.x - Reserved MS-DOS Name Scan Evasion

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device names such as (1) LPT1, (2) COM1, (3) AUX, (4) CON, or (5) PRN, which can allow malicious code to bypass detection when it is installed, copied, or executed.

Affected Products (1)

sophos · small_business_suitevulnerable

References (6)

http://www.idefense.com/application/poi/display?id=143&type=vulnerabilities

http://www.seifried.org/security/advisories/kssa-005.html

ExploitPatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/17468

http://www.idefense.com/application/poi/display?id=143&type=vulnerabilities

http://www.seifried.org/security/advisories/kssa-005.html

ExploitPatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/17468

KEV Catalog EPSS Scores Vendors All CVEs