{"id":"CVE-2004-0552","aliases":["EUVD-2004-0551","GHSA-7wv3-c4wx-9xjq"],"status":"published","title":"Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain...","description":"Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device names such as (1) LPT1, (2) COM1, (3) AUX, (4) CON, or (5) PRN, which can allow malicious code to bypass detection when it is installed, copied, or executed.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.23874,"percentile":0.97841,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2004-09-28T04:00:00Z","modified":"2026-06-16T22:05:51Z","exploits":[{"source":"exploitdb","id":"EDB-24623","title":"Sophos Anti-Virus 3.x - Reserved MS-DOS Name Scan Evasion","type":"remote","platform":"windows","date":"2004-09-22","verified":true,"url":"https://www.exploit-db.com/exploits/24623"}],"products":[{"vendor":"sophos","product":"small_business_suite"}],"references":[{"url":"http://www.idefense.com/application/poi/display?id=143\u0026type=vulnerabilities","tags":["third-party-advisory","x_refsource_IDEFENSE","x_transferred"]},{"url":"http://www.seifried.org/security/advisories/kssa-005.html","tags":["x_refsource_MISC","x_transferred","Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17468","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-0552"},{"url":"https://github.com/advisories/GHSA-7wv3-c4wx-9xjq"}],"sources":{"cve":[{"id":"CVE-2004-0552","description":"Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device names such as (1) LPT1, (2) COM1, (3) AUX, (4) CON, or (5) PRN, which can allow malicious code to bypass detection when it is installed, copied, or executed.","status":"published","published":"2004-09-28T04:00:00Z","modified":"2024-08-08T00:24:25.785Z","updated_at":"2026-11-02T14:34:55.098814Z"}],"euvd":[{"id":"EUVD-2004-0551","description":"Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device names such as (1) LPT1, (2) COM1, (3) AUX, (4) CON, or (5) PRN, which can allow malicious code to bypass detection when it is installed, copied, or executed.","status":"published","published":"2004-09-28T04:00:00Z","modified":"2024-08-08T00:24:25Z","updated_at":"2026-11-03T01:15:19.183327Z"}],"ghsa":[{"id":"GHSA-7wv3-c4wx-9xjq","title":"Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain...","description":"Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device names such as (1) LPT1, (2) COM1, (3) AUX, (4) CON, or (5) PRN, which can allow malicious code to bypass detection when it is installed, copied, or executed.","status":"published","published":"2022-04-29T02:57:55Z","modified":"2023-01-30T05:02:45Z","updated_at":"2026-11-02T14:46:42.642348Z"}],"nvd":[{"id":"CVE-2004-0552","description":"Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device names such as (1) LPT1, (2) COM1, (3) AUX, (4) CON, or (5) PRN, which can allow malicious code to bypass detection when it is installed, copied, or executed.","status":"published","published":"2004-11-03T05:00:00Z","modified":"2026-06-16T22:05:51.947Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:51.000028Z"}]}}