Re: [TCLUG:8116] theoretical challenge

[Christopher Palmer <reid@pconline.com>]

On Sun, 5 Sep 1999, Lawrence Crisp wrote:

> Ok, I have what may be an off topic question, but I'm not sure, so I'll 
> ask it anyway, and beg forgiveness if it is.  First off, is anyone familiar 
> with Filemaker databases?  Can one set one up on a Linux system accessable 
> on the web?  Second, what kind of security holes might exist in a Filemaker 
> database on the web, on any platform?  Basically, if I were to set up a 
> Filemaker database on the web, how could one crack it?  How could I make it 
> secure from these attacks?

To the best of my knowledge, Filemaker runs only on Mac OS. It does have a
Web plugin that allows you to serve the database as a Web site. Any
security issues would pertain directly to Mac OS and Filemaker itself, and
I've never seen anything relating to those things on (e.g.) Bugtraq (but
that doesn't mean you shouldn't search the Bugtraq archives).

Mac OS is of course not a multiuser system, and doesn't typically run any
services. So you can consider a Mac running Filemaker roughly equivalent
to a pretty tight Unix system, and any vulnerabilities will be specific to
Filemaker's Web server plugin.


-- Chris

  Christopher Reid Palmer : http://www.innerFireWorks.com/