SolidWorks Workgroup PDM Arbitrary File Overwrite Vulnerability

Bugtraq ID:	65751
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Feb 22 2014 12:00AM
Updated:	Mar 07 2014 12:54AM
Credit:	Mohamed Shetta
Vulnerable:
Not Vulnerable:

SolidWorks Workgroup PDM Arbitrary File Overwrite Vulnerability

SolidWorks Workgroup PDM is prone to an arbitrary file-overwrite vulnerability.

Successful exploits may allow an attacker to overwrite arbitrary files in the context of the user running the affected application.

SolidWorks Workgroup PDM 2014 SP2 is vulnerable; other versions may also be affected.

SolidWorks Workgroup PDM Arbitrary File Overwrite Vulnerability

The following exploits are available:

• /data/vulnerabilities/exploits/65751.py
• /data/vulnerabilities/exploits/65751.rb

SolidWorks Workgroup PDM Arbitrary File Overwrite Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

SolidWorks Workgroup PDM Arbitrary File Overwrite Vulnerability

References:

• SolidWorks Web Site (SolidWorks)