Google GMail exploit

From: Locke Nash Cole (junkmauler_at_hotmail.com)
Date: 10/30/04 

Date: Sat, 30 Oct 2004 00:04:18 GMT

>From Slashdot.org
http://it.slashdot.org/it/04/10/29/1830247.shtml

"A security hole in GMail has been found (an XSS vulnerability) which allows
access to user accounts without authentication. What makes the exploit worse
is the fact that changing passwords doesn't help. The full details of the
exploit haven't been disclosed. The vulnerability was reported by Israeli
news site Nana. They were tipped off by an Israeli hacker. Google has been
notified and they are working to close the hole. The Register has the story
here."

-L