CVE-2004-0235

Exp

Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1) .. sequences or (2) absolute pathnames with double leading slashes ("//absolute/path").

Published: 2004-08-18 Last update: 2026-04-16 Assigner: [email protected] Source: [email protected]

Conclusion & alert: CVE-2004-0235 is rated High Exploit Risk (66.9/100): CVSS Medium severity, with medium exploitation likelihood (EPSS 4.12%). Core evidence: 1 public exploit reference(s) are indexed (Exploit-DB). Mandatory action: Public exploits are available—assess exposure, apply mitigations, and prioritize patching.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Public exploit references (Exploit-DB) for CVE-2004-0235

EDB-ID Source Kind Published Link
nvd_ref exploit_tag Exploit-DB ↗

Exploit prediction scoring system (EPSS) score for CVE-2004-0235

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-06-15 10.50% 4.12% -6.38%
2 2026-01-08 6.96% 10.50% +3.53%
3 2025-03-30 6.96%

Full EPSS history (12 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2004-0235

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
6.4 2.0 MEDIUM
AV:N/AC:L/Au:N/C:P/I:P/A:N Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:L)
Exploitation conditions are straightforward and predictable.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:P)
Partial confidentiality impact.
Integrity impact (I:P)
Partial integrity impact.
Availability impact (A:N)
No availability impact.
10.0 4.9 [email protected]

Weakness enumeration for CVE-2004-0235

OS Trackers for CVE-2004-0235

vendor priority summary link
redhat medium https://access.redhat.com/security/cve/CVE-2004-0235
ubuntu medium CVE-2004-0235 medium priority: Ubuntu including 1 source packages (lha), 4 status rows across 4 suites (dapper, edgy, feisty, upstream): released 3, needs-triage 1. https://ubuntu.com/security/CVE-2004-0235

Affected software / configurations for CVE-2004-0235

Vendor Product Version Raw CPE
clearswift mailsweeper 4.0 cpe:2.3:a:clearswift:mailsweeper:4.0:*:*:*:*:*:*:*
clearswift mailsweeper 4.1 cpe:2.3:a:clearswift:mailsweeper:4.1:*:*:*:*:*:*:*
clearswift mailsweeper 4.2 cpe:2.3:a:clearswift:mailsweeper:4.2:*:*:*:*:*:*:*
clearswift mailsweeper 4.3 cpe:2.3:a:clearswift:mailsweeper:4.3:*:*:*:*:*:*:*
clearswift mailsweeper 4.3.3 cpe:2.3:a:clearswift:mailsweeper:4.3.3:*:*:*:*:*:*:*
clearswift mailsweeper 4.3.4 cpe:2.3:a:clearswift:mailsweeper:4.3.4:*:*:*:*:*:*:*
clearswift mailsweeper 4.3.5 cpe:2.3:a:clearswift:mailsweeper:4.3.5:*:*:*:*:*:*:*
clearswift mailsweeper 4.3.6 cpe:2.3:a:clearswift:mailsweeper:4.3.6:*:*:*:*:*:*:*
clearswift mailsweeper 4.3.6_sp1 cpe:2.3:a:clearswift:mailsweeper:4.3.6_sp1:*:*:*:*:*:*:*
clearswift mailsweeper 4.3.7 cpe:2.3:a:clearswift:mailsweeper:4.3.7:*:*:*:*:*:*:*
clearswift mailsweeper 4.3.8 cpe:2.3:a:clearswift:mailsweeper:4.3.8:*:*:*:*:*:*:*
clearswift mailsweeper 4.3.10 cpe:2.3:a:clearswift:mailsweeper:4.3.10:*:*:*:*:*:*:*
clearswift mailsweeper 4.3.11 cpe:2.3:a:clearswift:mailsweeper:4.3.11:*:*:*:*:*:*:*
clearswift mailsweeper 4.3.13 cpe:2.3:a:clearswift:mailsweeper:4.3.13:*:*:*:*:*:*:*
f-secure f-secure_anti-virus 4.51 cpe:2.3:a:f-secure:f-secure_anti-virus:4.51:*:linux_gateways:*:*:*:*:*
f-secure f-secure_anti-virus 4.51 cpe:2.3:a:f-secure:f-secure_anti-virus:4.51:*:linux_servers:*:*:*:*:*
f-secure f-secure_anti-virus 4.51 cpe:2.3:a:f-secure:f-secure_anti-virus:4.51:*:linux_workstations:*:*:*:*:*
f-secure f-secure_anti-virus 4.52 cpe:2.3:a:f-secure:f-secure_anti-virus:4.52:*:linux_gateways:*:*:*:*:*
f-secure f-secure_anti-virus 4.52 cpe:2.3:a:f-secure:f-secure_anti-virus:4.52:*:linux_servers:*:*:*:*:*
f-secure f-secure_anti-virus 4.52 cpe:2.3:a:f-secure:f-secure_anti-virus:4.52:*:linux_workstations:*:*:*:*:*
f-secure f-secure_anti-virus 4.60 cpe:2.3:a:f-secure:f-secure_anti-virus:4.60:*:samba_servers:*:*:*:*:*
f-secure f-secure_anti-virus 5.5 cpe:2.3:a:f-secure:f-secure_anti-virus:5.5:*:client_security:*:*:*:*:*
f-secure f-secure_anti-virus 5.41 cpe:2.3:a:f-secure:f-secure_anti-virus:5.41:*:mimesweeper:*:*:*:*:*
f-secure f-secure_anti-virus 5.41 cpe:2.3:a:f-secure:f-secure_anti-virus:5.41:*:windows_servers:*:*:*:*:*
f-secure f-secure_anti-virus 5.41 cpe:2.3:a:f-secure:f-secure_anti-virus:5.41:*:workstations:*:*:*:*:*
f-secure f-secure_anti-virus 5.42 cpe:2.3:a:f-secure:f-secure_anti-virus:5.42:*:mimesweeper:*:*:*:*:*
f-secure f-secure_anti-virus 5.42 cpe:2.3:a:f-secure:f-secure_anti-virus:5.42:*:windows_servers:*:*:*:*:*
f-secure f-secure_anti-virus 5.42 cpe:2.3:a:f-secure:f-secure_anti-virus:5.42:*:workstations:*:*:*:*:*
f-secure f-secure_anti-virus 5.52 cpe:2.3:a:f-secure:f-secure_anti-virus:5.52:*:client_security:*:*:*:*:*
f-secure f-secure_anti-virus 6.21 cpe:2.3:a:f-secure:f-secure_anti-virus:6.21:*:ms_exchange:*:*:*:*:*
f-secure f-secure_anti-virus 2003 cpe:2.3:a:f-secure:f-secure_anti-virus:2003:*:*:*:*:*:*:*
f-secure f-secure_anti-virus 2004 cpe:2.3:a:f-secure:f-secure_anti-virus:2004:*:*:*:*:*:*:*
f-secure f-secure_for_firewalls 6.20 cpe:2.3:a:f-secure:f-secure_for_firewalls:6.20:*:*:*:*:*:*:*
f-secure f-secure_internet_security 2003 cpe:2.3:a:f-secure:f-secure_internet_security:2003:*:*:*:*:*:*:*
f-secure f-secure_internet_security 2004 cpe:2.3:a:f-secure:f-secure_internet_security:2004:*:*:*:*:*:*:*
f-secure f-secure_personal_express 4.5 cpe:2.3:a:f-secure:f-secure_personal_express:4.5:*:*:*:*:*:*:*
f-secure f-secure_personal_express 4.6 cpe:2.3:a:f-secure:f-secure_personal_express:4.6:*:*:*:*:*:*:*
f-secure f-secure_personal_express 4.7 cpe:2.3:a:f-secure:f-secure_personal_express:4.7:*:*:*:*:*:*:*
f-secure internet_gatekeeper 6.31 cpe:2.3:a:f-secure:internet_gatekeeper:6.31:*:*:*:*:*:*:*
f-secure internet_gatekeeper 6.32 cpe:2.3:a:f-secure:internet_gatekeeper:6.32:*:*:*:*:*:*:*
rarlab winrar 3.20 cpe:2.3:a:rarlab:winrar:3.20:*:*:*:*:*:*:*
redhat lha 1.14i-9 cpe:2.3:a:redhat:lha:1.14i-9:*:i386:*:*:*:*:*
sgi propack 2.4 cpe:2.3:a:sgi:propack:2.4:*:*:*:*:*:*:*
sgi propack 3.0 cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*
stalker cgpmcafee 3.2 cpe:2.3:a:stalker:cgpmcafee:3.2:*:*:*:*:*:*:*
tsugio_okamoto lha 1.14 cpe:2.3:a:tsugio_okamoto:lha:1.14:*:*:*:*:*:*:*
tsugio_okamoto lha 1.15 cpe:2.3:a:tsugio_okamoto:lha:1.15:*:*:*:*:*:*:*
tsugio_okamoto lha 1.17 cpe:2.3:a:tsugio_okamoto:lha:1.17:*:*:*:*:*:*:*
winzip winzip 9.0 cpe:2.3:a:winzip:winzip:9.0:*:*:*:*:*:*:*
redhat fedora_core core_1.0 cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:*

References for CVE-2004-0235

URL Tags
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000840
http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020776.html
http://marc.info/?l=bugtraq&m=108422737918885&w=2
http://security.gentoo.org/glsa/glsa-200405-02.xml
http://www.debian.org/security/2004/dsa-515
http://www.redhat.com/archives/fedora-announce-list/2004-May/msg00005.html
http://www.redhat.com/support/errata/RHSA-2004-178.html
http://www.redhat.com/support/errata/RHSA-2004-179.html
http://www.securityfocus.com/bid/10243 Exploit Patch Vendor Advisory
https://bugzilla.fedora.us/show_bug.cgi?id=1833
https://exchange.xforce.ibmcloud.com/vulnerabilities/16013
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10409
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A978
cvelogic Threat Intelligence