Required CVE Record Information
Description
The documentation for CuteNews 1.3.6 and possibly other versions specifies that files under cutenews/data must be manually given world-writable permissions, which allows local users to insert false news, delete news, and possibly gain privileges or have other unknown impact.
References 4 Total
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.
References 4 Total
- securitytracker.com: 1011099 vdb-entryx_transferred
- osvdb.org: 9385 vdb-entryx_transferred
- archives.neohapsis.com: 20040829 CuteNews News.txt writable to world mailing-listx_transferred
- exchange.xforce.ibmcloud.com: cutenews-newstxt-world-writable(17161) vdb-entryx_transferred