News
[PSUs]| Monday 1st November 2004 |
Google fixes Gmail hijacking flaw
10:54AM, Monday 1st November 2004
Google has fixed a flaw in Gmail that could let hackers hijack email accounts. The company did not reveal details of the vulnerability, but acknowledged that it was possible to take complete control of another person's account.
Israel's Nana NetLife Magazine exposed the flaw last week, reporting that a user's cookie could be stolen. This cookie could then be installed on another machine, providing access to the user's account without having to enter a password. Even if the user changed their password the account would remain compromised.
Google spokesman Nathan Tyler said, 'Google was recently alerted to a potential security vulnerability affecting the Gmail service. We have since fixed this vulnerability, and all current and future Gmail users are protected.'
Submit to: Digg | Slashdot | Del.icio.us | Technorati
