CVE-2004-0552 – Sophos Anti-Virus 3.x - Reserved MS-DOS Name Scan Evasion

https://notcve.org/view.php?id=CVE-2004-0552

Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device names such as (1) LPT1, (2) COM1, (3) AUX, (4) CON, or (5) PRN, which can allow malicious code to bypass detection when it is installed, copied, or executed. Sophos Small Business Suite 1.00 para Windows no maneja adecuadamente ficheros cuyos tamaños contienen nombres reservados de MS-DOS, como (1) LPT1, (2) COM1, (3) AUX, (4) CON, or (5) PRN, lo que puede permitir que código malicioso evite la detección cuando es instalado, copiado o ejecutado. • https://www.exploit-db.com/exploits/24623 http://www.idefense.com/application/poi/display?id=143&type=vulnerabilities http://www.seifried.org/security/advisories/kssa-005.html https://exchange.xforce.ibmcloud.com/vulnerabilities/17468 •