CVE-2005-3923

MEDIO 5.0CVE-2005-3923 · Published 30/11/2005 · updated 16/06/2026

In breve

CVE-2005-3923 è una vulnerabilità MEDIO (CVSS 5.0) che riguarda netobjects fusion (netobjects).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.4%, superiore al 72.1% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
netobjects fusion netobjects	`= 9`	No fix yet

Description

NetObjects Fusion 9 (NOF9) allows remote attackers to obtain sensitive information, including passwords, by downloading the _versioning_repository_/rollbacklog.xml file, then using it to download and modify the associated ZIP file to edit and republish the site.

References

secunia.com/advisories/17667 · Vendor Advisory
schneier.com/blog/archives/2005/11/possible_net_ob.html
vupen.com/english/advisories/2005/2555

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free