30-10-2004, 00:39
|
#1
|
|
Inactive
Join Date: Jun 2003
Location: Los Angeles, CA
Age: 47
Posts: 6,343
|
GMail vuln
Quote:
Google's high profile webmail service, Gmail, is vulnerable to a security exploit that might allow hackers full access to a user's email account simply by knowing the user name, according to reports.
The security flaw allows full access to users' accounts, with no need of a password, Israeli news site Nana says . Using a hex-encoded XSS link, the victim's cookie file can be stolen by a hacker, who can later use it to identify himself to Gmail as the original owner of an email account, regardless of whether or not the password is subsequently changed. Following up a tip from an Israeli hacker, journos from the site confirmed the attack and verified the exploit with local security firm Aladdin Knowledge Systems.
|
http://www.theregister.co.uk/2004/10/29/gmail_vuln/
|
|
|
|
30-10-2004, 00:46
|
#2
|
|
Guest
|
Re: GMail vuln
Google had better get that fixed and quickly then! 
|
|
|
|
|
30-10-2004, 01:01
|
#3
|
|
Inactive
Join Date: Jun 2003
Location: 127.0.0.1
Age: 62
Posts: 15,868
|
Re: GMail vuln
Oh dear, watch out for spoofed spam and viruses from Gmail accounts then if that holes not fixed PDQ. On the other hand that these things become public knowledge often means a fix is almost in place, we hope.
|
|
|
|
|
31-10-2004, 22:09
|
#4
|
|
Inactive
Join Date: Jun 2003
Posts: 450
|
Re: GMail vuln
Im sorry, but GMail is still BETA last time i checked?
Whats the fuss about?
|
|
|
|
|
31-10-2004, 23:26
|
#5
|
|
Inactive
Join Date: Jun 2003
Location: Los Angeles, CA
Age: 47
Posts: 6,343
|
Re: GMail vuln
|
|
|
|
Posting Rules
|
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
HTML code is Off
|
|
|
All times are GMT. The time now is 22:45.
|
Join CF
You are here: 
