[Full-disclosure] Filemaker Pro 7 - any known exploits/hacks available?

HiW HiW hackingiswrong at gmail.com
Tue Jan 31 16:46:58 GMT 2006


Our organization has a small but vocal group that is pushing for us I.T.
folks to install Filemaker Pro (the new version 7) on one of our servers.
Apparently it has a "new" web publishing component that magically interfaces
with our web server and allows anyone (gulp) to expose their database to the
web.

Yes, this is scary to me also.

I have been tasked with deciding if this is "safe and secure enough" to
allow them to have it. I have been trying, but unsuccessful so far, to
locate any known vulnerabilities in this software.  I suppose I will need to
use the standard toolz, etc...any ideas anyone?

TIA!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20060131/00999293/attachment.html 


Full-Disclosure is hosted and sponsored by Secunia.