CVE-2004-0595

Public Exploit

Description

The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be processed by web browsers such as Internet Explorer and Safari, which ignore null characters and facilitate the exploitation of cross-site scripting (XSS) vulnerabilities.

6.8

CVSS

Severity: Medium

CVSS 2.0 •

EPSS 54.87% Top 5%

Vendor Advisory com.br Vendor Advisory debian.org Vendor Advisory redhat.com Vendor Advisory redhat.com Vendor Advisory redhat.com Vendor Advisory debian.org Vendor Advisory novell.com Vendor Advisory mandrakesecure.net Vendor Advisory redhat.com Vendor Advisory marc.info Vendor Advisory gentoo.org Vendor Advisory securityfocus.com

Affected: n/a n/a

References

Link	Tags
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000847	vendor advisory
http://marc.info/?l=bugtraq&m=108982983426031&w=2	mailing list
http://www.debian.org/security/2005/dsa-669	vendor advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10619	vdb entry signature
http://www.redhat.com/support/errata/RHSA-2004-395.html	vendor advisory
http://www.redhat.com/support/errata/RHSA-2004-405.html	vendor advisory
http://www.redhat.com/support/errata/RHSA-2004-392.html	vendor advisory
http://www.debian.org/security/2004/dsa-531	patch vendor advisory
http://www.novell.com/linux/security/advisories/2004_21_php4.html	vendor advisory
http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:068	vendor advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16692	vdb entry
http://www.redhat.com/support/errata/RHSA-2005-816.html	vendor advisory
http://marc.info/?l=bugtraq&m=109181600614477&w=2	vendor advisory
http://marc.info/?l=bugtraq&m=109051444105182&w=2	mailing list
http://www.securityfocus.com/bid/10724	exploit vdb entry patch vendor advisory
http://marc.info/?l=bugtraq&m=108981780109154&w=2	mailing list
http://www.gentoo.org/security/en/glsa/glsa-200407-13.xml	vendor advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023909.html	mailing list

Frequently Asked Questions

What is the severity of CVE-2004-0595?: CVE-2004-0595 has been scored as a medium severity vulnerability.
How to fix CVE-2004-0595?: To fix CVE-2004-0595, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2004-0595 being actively exploited in the wild?: It is possible that CVE-2004-0595 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~55% probability that this vulnerability will be exploited by malicious actors in the next 30 days.