high7.5Public exploit code
CVE-2004-0552
Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device names such as (1) LPT1, (2) COM1, (3) AUX…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Sophos Anti-Virus 3.x - Reserved MS-DOS Name Scan Evasion2004-09-22 · remote · windows · Verified
Impact
Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device names such as (1) LPT1, (2) COM1, (3) AUX, (4) CON, or (5) PRN, which can allow malicious code to bypass detection when it is installed, copied, or executed.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sophos | Small Business Suite | through 1.00 |