Description

PHP 4.0 through 4.1.1 stores session IDs in temporary files whose name contains the session ID, which allows local users to hijack web connections.

Remediation

References

CVE-2002-0121

Related Vulnerabilities

Oracle Application Server Other Vulnerability (CVE-2009-0217)

TYPO3 URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-15241)

PHP Other Vulnerability (CVE-2006-1015)

Plone CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-4030)

WordPress Plugin Forminator-Contact Form, Payment Form & Custom Form Builder Multiple Vulnerabilities (1.29.3)

Severity

Low

Classification

CVE-2002-0121

Tags

Missing Update Known Vulnerabilities