full-disclosure - Slashdot: Gmail Accounts Vulnerable to XSS Exploit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <4b6ee93104103005371d5c009d@mail.gmail.com>
From: xploitable at gmail.com (n3td3v)
Subject: Slashdot: Gmail Accounts Vulnerable to XSS Exploit

On Sat, 30 Oct 2004 13:47:30 +0200, Shoshannah Forbes <xslf@...f.com> wrote:
> "A security hole in GMail has been found (an XSS vulnerability) which
> allows access to user accounts without authentication. What makes the
> exploit worse is the fact that changing passwords doesn't help. The full
> details of the exploit haven't been disclosed"
> http://slashdot.org/article.pl?sid=04/10/29/1830247
> --
> Shoshannah Forbes
> http://www.xslf.com

This topic has already been post on FD hours and hours ago.

I guess the security professionals are getting over excited about this
stuff because they don't have the exploit :-)

Thanks,

n3td3v