CVE-2004-0552: Sophos Small Business Suite

High severity, CVSS 7.5. EPSS: 23.9% chance of exploitation in the next 30 days.

Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device names such as (1) LPT1, (2) COM1, (3) AUX, (4) CON, or (5) PRN, which can allow malicious code to bypass detection when it is installed, copied, or executed.

Affected products

• Sophos Small Business Suite: up to and including 1.00

Published 2004-11-03. Last modified 2026-06-16.