Google Inc. has fixed a security flaw in its Gmail Web-based e-mail service that allowed attackers to hijack users’ e-mail accounts. See blog entry earlier http://msmvps.com/donna/archive/2004/10/31/17416.aspx
“Google was recently alerted to a potential security vulnerability affecting the Gmail service. We have since fixed this vulnerability, and all current and future Gmail users are protected,” Google spokesman Nathan Tyler said.
Tyler declined to discuss the nature of the problem, but a source close to Google confirmed that the flaw allowed an attacker to gain complete control over a user’s account.