Chris Posted October 30, 2004 Report Share Posted October 30, 2004 Google's high profile webmail service, Gmail, is vulnerable to a security exploit that might allow hackers full access to a user's email account simply by knowing the user name, according to reports.The security flaw allows full access to users' accounts, with no need of a password, Israeli news site Nana says . Using a hex-encoded XSS link, the victim's cookie file can be stolen by a hacker, who can later use it to identify himself to Gmail as the original owner of an email account, regardless of whether or not the password is subsequently changed. Following up a tip from an Israeli hacker, journos from the site confirmed the attack and verified the exploit with local security firm Aladdin Knowledge Systems.It's unclear whether the hole has been maliciously exploited. Google has been notified of the issue and is reportedly working on a fix. No-one from the company was available to update The Register on the issue at time of going to press. ®More | Here Quote Link to comment Share on other sites More sharing options...
andsome Posted October 31, 2004 Report Share Posted October 31, 2004 Happy with Outlook Express Quote Link to comment Share on other sites More sharing options...
-pops- Posted October 31, 2004 Report Share Posted October 31, 2004 Yet another reason not to have or use Gmail Quote Link to comment Share on other sites More sharing options...
Chris Posted October 31, 2004 Author Report Share Posted October 31, 2004 Yet another reason not to have or use GmailBeing a former BETA tester -pops- i'm suprised at that comment. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.