/ 
CGI-Session-4.08
/ CGI::Session::ID::static
Security Advisories (2)
CVE-2006-1279 (2006-03-19)

CGI::Session 4.03-1 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by (1) Driver::File, (2) Driver::db_file, and possibly (3) Driver::sqlite.

CPANSA-CGI-Session-2006-01 (2006-04-06)

possible SQL injection attack

NAME

CGI::Session::ID::static - CGI::Session ID Driver for generating static IDs

SYNOPSIS

use CGI::Session;
$session = new CGI::Session("id:static", $ENV{REMOTE_ADDR});

DESCRIPTION

CGI::Session::ID::static is used to generate consistent, static session ID's. In other words, you tell CGI::Session ID you want to use, and it will honor it.

Unlike the other ID drivers, this one requires that you provide an ID when creating the session object; if you pass it an undefined value, it will croak.

COPYRIGHT

Copyright (C) 2002 Adam Jacob <adam@sysadminsith.org>,

This library is free software. You can modify and distribute it under the same terms as Perl itself.

AUTHORS

Adam Jacob <adam@sysadminsith.org>,

LICENSING

For additional support and licensing see CGI::Session