Description
NetObjects Fusion 9 (NOF9) allows remote attackers to obtain sensitive information, including passwords, by downloading the _versioning_repository_/rollbacklog.xml file, then using it to download and modify the associated ZIP file to edit and republish the site.
References
- http://www.schneier.com/blog/archives/2005/11/possible_net_ob.html
- ADV-2005-2555 vdb-entry
- 17667 third-party-advisory