CVE-2004-2615

CVE-2004-2615 describes a vulnerability in CuteNews 1.3.6 and potentially other versions, where documentation instructs users to set world-writable permissions on files within the cutenews/data directory. This misconfiguration allows local users to manipulate news content, including insertion and deletion, and could potentially lead to privilege escalation or other unauthorized actions. The vulnerability has a CVSS score of 4.6 (AV:L/AC:L/Au:N/C:P/I:P/A:P), indicating a low attack complexity and requiring local access, with potential impacts on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or KEV listing, though it has garnered significant community discussion with 10 mentions.