|
Full Disclosure
mailing list archives
Re: Google / GMail bug, all accounts vulnerable
From: "Ed Carp" <erc () pobox com>
Date: Fri, 7 Dec 2007 11:41:58 -0700
You don't need to submit anything, just viewing the page will log you out of
gmail...
On Dec 7, 2007 9:23 AM, worried security <worriedsecurity () googlemail com>
wrote:
On Dec 7, 2007 3:54 PM, Mukul Dharwadkar <mukul.dharwadkar () gmail com>
wrote:
Precisely. I don't see any vulnerability here unless the account holder
has
set it up incorrectly in which case it is not a bug / vulnerability but
rathe a user error
Try viewing the image when you are logged into your gmail account, it
logs you out.
Regards,
n3td3v
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
By Date
By Thread
Current thread:
Re: Google / GMail bug, all accounts vulnerable M . B . Jr . (Dec 07)
Re: Google / GMail bug, all accounts vulnerable Kristian Erik Hermansen (Dec 07)
|