Google fixes Gmail hijacking flaw

By Simon Aughton

Posted on 1 Nov 2004 at 10:54

Google has fixed a flaw in Gmail that could let hackers hijack email accounts. The company did not reveal details of the vulnerability, but acknowledged that it was possible to take complete control of another person's account.

Israel's Nana NetLife Magazine exposed the flaw last week, reporting that a user's cookie could be stolen. This cookie could then be installed on another machine, providing access to the user's account without having to enter a password. Even if the user changed their password the account would remain compromised.

Google spokesman Nathan Tyler said, 'Google was recently alerted to a potential security vulnerability affecting the Gmail service. We have since fixed this vulnerability, and all current and future Gmail users are protected.'