full-disclosure - Filemaker Pro 7 - any known exploits/hacks available?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <5cb02df30601310846i5aa6fcc6neafd203992b2f05@mail.gmail.com>
Date: Tue Jan 31 16:47:06 2006
From: hackingiswrong at gmail.com (HiW HiW)
Subject: Filemaker Pro 7 - any known exploits/hacks
	available?

Our organization has a small but vocal group that is pushing for us I.T.
folks to install Filemaker Pro (the new version 7) on one of our servers.
Apparently it has a "new" web publishing component that magically interfaces
with our web server and allows anyone (gulp) to expose their database to the
web.

Yes, this is scary to me also.

I have been tasked with deciding if this is "safe and secure enough" to
allow them to have it. I have been trying, but unsuccessful so far, to
locate any known vulnerabilities in this software.  I suppose I will need to
use the standard toolz, etc...any ideas anyone?

TIA!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20060131/00999293/attachment.html