Unspecified vulnerability in pprosetup in Sun PatchPro 2... · CVE-2002-2374 · GitHub Advisory Database · GitHub

Unspecified vulnerability in pprosetup in Sun PatchPro 2...

High severity Unreviewed Published Apr 30, 2022 to the GitHub Advisory Database • Updated Apr 3, 2025

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Unspecified vulnerability in pprosetup in Sun PatchPro 2.0 has unknown impact and attack vectors related to "unsafe use of temporary files."

References

Published by the National Vulnerability Database

Dec 31, 2002

Published to the GitHub Advisory Database Apr 30, 2022

Last updated Apr 3, 2025

Weaknesses

CWE-59

Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource. Learn more on MITRE.

CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently. Learn more on MITRE.