Description

PHP 4.0 through 4.1.1 stores session IDs in temporary files whose name contains the session ID, which allows local users to hijack web connections.

Remediation

References

CVE-2002-0121

Related Vulnerabilities

WordPress Plugin Essential Content Types Security Bypass (1.4)

WordPress Plugin RocketTheme RokBox Multiple Vulnerabilities (2.13)

Oracle HTTP Server Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2022-21716)

Ruby on Rails Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-8162)

WordPress Plugin Ad Inserter-Ad Manager & AdSense Ads Directory Traversal (2.4.19)

Severity

Low

Classification

CVE-2002-0121

Tags

Missing Update Known Vulnerabilities