Even a sandboxed server can be circumvented if you know what you're doing and can put CF code up there.

I'm not going to post the details of how to do that here because I don't think that it will benefit the list, but I think it's important for people to know that just creating a sandbox doesn't provide total security. You also need to dig deeper into the underlying Java stuff to lock it down completely.

Spike

Tim Lucas wrote:

http://www.macromedia.com/devnet/security/security_zone/mpsb04-10.html?pss=rss_coldfusion_mpsb0410



It's

It's interesting that MM have taken so long to officially document this weakness....

I've said for a long while that anybody running a business on shared hosting would want to ensure that the server is CFMX EE with sandboxed accounts.

-- tim lucas

http://www.toolmantim.com





--

--------------------------------------------
Stephen Milligan
Code poet for hire
http://www.spike.org.uk

Do you cfeclipse? http://cfeclipse.tigris.org

---
You are currently subscribed to cfaussie as: [EMAIL PROTECTED]
To unsubscribe send a blank email to [EMAIL PROTECTED]
Aussie Macromedia Developers: http://lists.daemon.com.au/

Reply via email to