IT Security & Network Security News & Reviews - eWeek



Gmail Bug Exposes E-mails to Hackers




UNIX developers HBX Networks have stumbled upon a bug within Google's Gmail that allows access to other users' personal e-mails.

UNIX developers HBX Networks have stumbled upon a bug within Googles Gmail that allows access to other users personal e-mails.

By altering the "From" address field of an e-mail sent to the service, hackers could potentially find out a users personal information, including passwords.

At first glance, to the average user the e-mail would appear normal. But by clicking "show options" within the Gmail interface, the "Reply-To" field will show HTML code that is actually a formatted version of another users e-mail, HBX wrote on its Web site.

HBX said that they think a missing character is tripping up Gmail and causing it to print whatever is in its cache, or memory, into the Reply-To field.

The group did say much of what they saw was spam. However, what troubled them was in at least one case they were able to see a users password.

Read the full story on BetaNews: Gmail Bug Exposes E-mails to Hackers







 
 
>>> More IT Security & Network Security News & Reviews Articles          >>> More By Ed Oswald
 

FEATURED SPONSOR MESSAGE

Microsoft Sponsored Resource Center

Increase Your Microsoft Office 365 Knowledge! Dig inside this suite of cloud-based collaboration tools.

Watch the video >>

Brought to you by





Advertisement
eWEEK Quick LInks

 
Close this advertisement