CVE-2002-0121

PHP 4.0 through 4.1.1 stores session IDs in temporary files whose name contains the session ID, which allows local users to hijack web connections.

Score

CVSS 2.0 2.1 Low

Status

Modified - cve@mitre.org

Published

2002-03-25

Last modified

2024-08-08

Affected products

• Php (Php)

References

• http://online.securityfocus.com/archive/1/250196
• http://www.iss.net/security_center/static/7908.php
• http://www.securityfocus.com/bid/3873