There is an ongoing outage on the primary CPAN mirror. It is possible to work around the issue by using MetaCPAN as a mirror.

GRICHTER / Apache-SessionX-2.01 / CHANGES 

2.01 15. Nov. 2005 

- fixes security problem in session_id validation, which allows createtion of
  session with invalid id's.