Cable Forum - GMail vuln

Cable Forum (https://www.cableforum.uk/board/index.php)

- Internet Discussion (https://www.cableforum.uk/board/forumdisplay.php?f=25)

- - GMail vuln (https://www.cableforum.uk/board/showthread.php?t=19469)

Quote:

Google's high profile webmail service, Gmail, is vulnerable to a security exploit that might allow hackers full access to a user's email account simply by knowing the user name, according to reports.

The security flaw allows full access to users' accounts, with no need of a password, Israeli news site Nana says . Using a hex-encoded XSS link, the victim's cookie file can be stolen by a hacker, who can later use it to identify himself to Gmail as the original owner of an email account, regardless of whether or not the password is subsequently changed. Following up a tip from an Israeli hacker, journos from the site confirmed the attack and verified the exploit with local security firm Aladdin Knowledge Systems.

http://www.theregister.co.uk/2004/10/29/gmail_vuln/

Google had better get that fixed and quickly then! :erm:

Oh dear, watch out for spoofed spam and viruses from Gmail accounts then if that holes not fixed PDQ. On the other hand that these things become public knowledge often means a fix is almost in place, we hope.

Im sorry, but GMail is still BETA last time i checked?

Whats the fuss about?