Unspecified vulnerability in pprosetup in Sun PatchPro 2.0 has unknown impact and attack vectors related to "unsafe use of temporary files."
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
Link | Tags |
---|---|
http://www.securityfocus.com/bid/5540 | vdb entry patch |
http://sunsolve.sun.com/search/document.do?assetkey=1-21-113176-01-1&searchclause=113176 | patch |