Thursday, October 21, 2004

Gmail Drive Vulnerability Reported

Per a OSVDB report, Bjarke Viksoe's Gmail Drive 1.2 contains a flaw that may lead to an unauthorized information disclosure. The issue is due to the program naming the drive based on the Gmail account login name, resulting in a loss of confidentiality.



GMail Drive is a Shell Namespace Extension that creates a virtual filesystem around your Google GMail account, allowing you to use GMail as a storage medium.



Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

No comments:

Post a Comment