Re: [Full-Disclosure] GMail logout (not sure if you could call it a vulnerability)
From: Nico Golde (nion_at_gmx.net)
Date: 06/22/04
- Previous message: Jos Osborne: "RE: [Full-Disclosure] What Your Empty Wallet Says About You"
- In reply to: QoDS ec: "[Full-Disclosure] GMail logout (not sure if you could call it a vulnerability)"
- Next in thread: Nico Golde: "Re: [Full-Disclosure] GMail logout (not sure if you could call it a vulnerability)"
- Reply: Nico Golde: "Re: [Full-Disclosure] GMail logout (not sure if you could call it a vulnerability)"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
To: full-disclosure@lists.netsys.com Date: Tue, 22 Jun 2004 13:37:55 +0200
Hallo QoDS,
* QoDS ec <QoDSec@gmail.com> [2004-06-22 13:22]:
> for example consider the following invite link:
> http://gmail.google.com/gmail/a-da020f8475-a200b150b3
>
> if you change it to the following:
> http://gmail.google.com/gmail/a-da020f8435-a200b150b3
> ^^^^^^^^^^^^^
> Any of the following digits
> could change
> you will be automatically logged out and as it seems you will have the
> login name of the email of the person who did the invitation.
>
> Not sure if there is anything evil you could do about it but just a
> minor bug that should be fixed.
and the login at this point doesnt works correctly.
ia am not able to login at this stage.
is it only my problem?
regards nico
-- Nico Golde - 310777820@ICQ nico@ngolde.de | nion@gmx.net | http://www.ngolde.de GPG: FF46 E565 5CC1 E2E5 3F69 C739 1D87 E549 7364 7CFF Is there life after /sbin/halt -p?
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
- application/pgp-signature attachment: stored
- Previous message: Jos Osborne: "RE: [Full-Disclosure] What Your Empty Wallet Says About You"
- In reply to: QoDS ec: "[Full-Disclosure] GMail logout (not sure if you could call it a vulnerability)"
- Next in thread: Nico Golde: "Re: [Full-Disclosure] GMail logout (not sure if you could call it a vulnerability)"
- Reply: Nico Golde: "Re: [Full-Disclosure] GMail logout (not sure if you could call it a vulnerability)"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
