CVE-2004-0552
high · 7.5Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device names such as (1) LPT1, (2) COM1, (3) AUX, (4) CON, or (5) PRN, which can allow malicious code to bypass detection when it is installed, copied, or executed.
7.5
CVSS
23.9%
EPSS (exploit prob.)
98th
EPSS percentile
2004-11-03
Published
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| sophos | small_business_suite | <= 1.00 |
Check a specific version with /api/v1/cve/match.
References
- http://www.idefense.com/application/poi/display?id=143&type=vulnerabilities
- http://www.seifried.org/security/advisories/kssa-005.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17468
- http://www.idefense.com/application/poi/display?id=143&type=vulnerabilities
- http://www.seifried.org/security/advisories/kssa-005.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17468
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2004-0552