CVE-2005-3923 NetObjects Fusion 9 (NOF9) allows remote attackers to obtain sensitive information, including passwords, by downloading the versioning_repository/rollbacklog.xml file, then using it to download and mo...
MediumCVSS 5.0
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
NetObjects Fusion 9 (NOF9) allows remote attackers to obtain sensitive information, including passwords, by downloading the versioning_repository/rollbacklog.xml file, then using it to download and modify the associated ZIP file to edit and republish the site.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netobjects fusion | = 9 | No fix listed |
References
- 17667 third-party-advisory vendor-advisory
- www.schneier.com
- ADV-2005-2555 vdb-entry