CVE-2004-0595: avaya converged_communications_server
Vulnerability summary
CVE-2004-0595 is a medium (CVSS 6.8) vulnerability in avaya converged_communications_server. EPSS estimates a 45.16% chance of exploitation in the next 30 days, higher than 98.7% of scored vulnerabilities. 2 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 3Timeline
- 16-07-2004PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be processed by web browsers such as Internet Explorer and Safari, which ignore null characters and facilitate the exploitation of cross-site scripting (XSS) vulnerabilities.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
45.16%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
0.00 pp
From 45.16% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (securityfocus.com)
Maturity: unknown
PHP 4.x/5.0 - 'Strip_Tags()' Function Bypass
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Avaya4 products
- converged_communications_server2.0
- s8300r2.0.0 | r2.0.1
- s8500r2.0.0 | r2.0.1
- s8700r2.0.0 | r2.0.1
Php1 product
- php4.0 | 4.0.1 | 4.0.2 | 4.0.3 | 4.0.4 | 4.0.5 | 4.0.6 | 4.0.7 | 4.1.0 | 4.1.1 | 4.1.2 | 4.2.0 | 4.2.1 | 4.2.2 | 4.2.3 | 4.3.0 | 4.3.1 | 4.3.2 | 4.3.3 | 4.3.5 | 4.3.6 | 4.3.7 | 5.0:rc1 | 5.0:rc2 | 5.0:rc3
Redhat1 product
- fedora_corecore_1.0 | core_2.0
Trustix1 product
- secure_linux1.5 | 2.0 | 2.1
4 vendors · 7 products
References
18 links
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10619VDB EntrySignatureX Refsource OVAL
- www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:068Vendor AdvisoryX Refsource MANDRAKE