Lucene search

K
cve[email protected]CVE-2004-0552
HistoryNov 03, 2004 - 5:00 a.m.

CVE-2004-0552

2004-11-0305:00:00
NVD-CWE-Other
web.nvd.nist.gov
29
sophos
small business suite
windows
file handling
security vulnerability
cve-2004-0552
nvd

7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.843 High

EPSS

Percentile

98.4%

Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device names such as (1) LPT1, (2) COM1, (3) AUX, (4) CON, or (5) PRN, which can allow malicious code to bypass detection when it is installed, copied, or executed.

7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.843 High

EPSS

Percentile

98.4%

Related for CVE-2004-0552