← All advisories

Unrated severityNVD Advisory· Published Mar 25, 2002· Updated Jun 16, 2026

CVE-2002-0121

CVE-2002-0121

Description

PHP 4.0 through 4.1.1 stores session IDs in temporary files whose name contains the session ID, which allows local users to hijack web connections.

Affected products

6

PHP/PHP6 versions
cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*
- (no CPE)range: 4.0 - 4.1.1

Patches

Vulnerability mechanics

References

3

online.securityfocus.com/archive/1/250196nvdPatch
www.iss.net/security_center/static/7908.phpnvdVendor Advisory
www.securityfocus.com/bid/3873nvd

News mentions

0

No linked articles in our index yet.