Gmail flaw allows attackers to steal messages

ankitsagwekar said:

September 26, 2007 (Computerworld) -- Accounts on Google Inc.'s Gmail can be easily hacked, allowing any past -- and future e-mail messages -- to be forwarded to the attacker's own in-box, a vulnerability researcher said yesterday.

*www.computerworld.com/action/artic...eBasic&articleId=9039120&source=NLT_PM&nlid=8

Click to expand...

In the example, the attacker writes a filter, which simply looks for e-mails with attachments and forwards them to an e-mail of their choice," Petkov said. "This filter will automatically transfer all e-mails matching the rule

Keep in mind that future e-mails will be forwarded as well. The attack will remain present for as long as the victim has the filter within their filter list, even if the initial vulnerability, which was the cause of the injection, is fixed by Google," he added.

Google confirmed the vulnerability and said it is working on a fix, but did not give a timetable for patching Gmail, saying only that "we expect [it] to be implemented shortly."

Click to expand...