homepage Welcome to WebmasterWorld Guest from 54.211.219.178
register, free tools, login, search, pro membership, help, library, announcements, recent posts, open posts,
Become a Pro Member
Visit PubCon.com
Home / Forums Index / Google / Google Gmail Advertising
Forum Library, Charter, Moderator: open

Google Gmail Advertising Forum

    
GMail Vulnerability
Google GMail 'CheckAvailability' Script May Disclose User Information to Re
ukgimp




msg:1553571
 9:20 am on Jul 15, 2004 (gmt 0)

[securitytracker.com...]

A vulnerability was reported in Google's GMail beta e-mail service. A remote user may be able to determine information about another user attempting to register an account on the system

 

bpresent




msg:1553572
 6:48 am on Jul 16, 2004 (gmt 0)

I noticed (weeks ago) that when I tried to register name 'bluewidget' that a message would be returned "'redwidget' is not available, try 'bluewidget2004'".

This seems to fit the intent of this article but I would hardly call it a high level security risk.

At this point in the process I did not actually have a gmail account and had provided little or no information about myself (G knew that I had another email address, the one I was invited on, and that my name was supposedly xyz).

Sounds very dramatic though (and the vagueness of this article allows the imagination to play with this).

Yes, it's true
A remote user may be able to determine information about another user
but as I saw it, the sum of that information was ... that another person on the planet had the desire to register a google email address of 'redwidget' :)

amznVibe




msg:1553573
 7:08 am on Jul 16, 2004 (gmt 0)

A remote user with a valid GMail invitation can determine information about another user ....
including the target user's first and last name

This isn't really a big deal other than embarassing for Google. I am willing to bet it will be fixed within hours.

bpresent




msg:1553574
 1:06 pm on Jul 16, 2004 (gmt 0)

The article was posted 5-Jul and I suspect it was probably fixed prior to the posting.

It is still a beta product.

Global Options:
 top home search open messages active posts  
 

Home / Forums Index / Google / Google Gmail Advertising
rss feed

All trademarks and copyrights held by respective owners. Member comments are owned by the poster.
Home ¦ Free Tools ¦ Terms of Service ¦ Privacy Policy ¦ Report Problem ¦ About ¦ Library ¦ Newsletter
WebmasterWorld is a Developer Shed Community owned by Jim Boykin.
© Webmaster World 1996-2014 all rights reserved