CVE-2005-3923

Published: Nov 30, 2005Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

NetObjects Fusion 9 (NOF9) allows remote attackers to obtain sensitive information, including passwords, by downloading the _versioning_repository_/rollbacklog.xml file, then using it to download and modify the associated ZIP file to edit and republish the site.

Affected (1)

Products: Netobjects: Netobjects Fusion

1 product

Netobjects Fusion

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Netobjects Netobjects Fusion	Version 9

References (6)

http://secunia.com/advisories/17667

Source: cve@mitre.org

Vendor Advisory

http://www.schneier.com/blog/archives/2005/11/possible_net_ob.html

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2005/2555

Source: cve@mitre.org

http://secunia.com/advisories/17667

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.schneier.com/blog/archives/2005/11/possible_net_ob.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2005/2555

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.