Re: [Full-Disclosure] Slashdot: Gmail Accounts Vulnerable to XSS Exploit

[n3td3v <xploitable@xxxxxxxxx>]

On Sat, 30 Oct 2004 13:47:30 +0200, Shoshannah Forbes <xslf@xxxxxxxx> wrote:
> "A security hole in GMail has been found (an XSS vulnerability) which
> allows access to user accounts without authentication. What makes the
> exploit worse is the fact that changing passwords doesn't help. The full
> details of the exploit haven't been disclosed"
> http://slashdot.org/article.pl?sid=04/10/29/1830247
> --
> Shoshannah Forbes
> http://www.xslf.com

This topic has already been post on FD hours and hours ago.

I guess the security professionals are getting over excited about this
stuff because they don't have the exploit :-)

Thanks,

n3td3v

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html