CVE-2002-0121: Low severity PHP PHP vulnerability
Published Mar 25, 2002
·Updated
PHP 4.0 through 4.1.1 stores session IDs in temporary files whose name contains the session ID, which allows local users to hijack web connections.
Affected Software
5 affected components
PHP PHP=4.1.0
PHP PHP=4.0.4
PHP PHP=4.0.5
PHP PHP=4.0.6
PHP PHP=4.1.2
Remediation
Patch Available
Event History
Mar 25, 2002
CVE Published
05:00 AM
Jun 25, 2002
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-0121?
CVE-2002-0121 is considered a high severity vulnerability due to its potential for session hijacking.
2
What software versions are affected by CVE-2002-0121?
CVE-2002-0121 affects PHP versions 4.0.4 to 4.1.2.
3
How do I fix CVE-2002-0121?
To fix CVE-2002-0121, upgrade to a version of PHP that is higher than 4.1.2.
4
What type of attack is possible with CVE-2002-0121?
CVE-2002-0121 allows local users to hijack web sessions through access to session files.
5
Can remote users exploit CVE-2002-0121?
No, CVE-2002-0121 is primarily a local privilege vulnerability and cannot be exploited by remote users.