low2.1
CVE-2002-0121
PHP 4.0 through 4.1.1 stores session IDs in temporary files whose name contains the session ID, which allows local users to hijack web connections.
Impact
PHP 4.0 through 4.1.1 stores session IDs in temporary files whose name contains the session ID, which allows local users to hijack web connections.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Php | Php | Versions 4.0.4, 4.0.5, 4.0.6, 4.1.0, 4.1.2 |