Gmail Bug Exposes E-mails to Hackers

[ViRaL1]

http://www.eweek.com/article2/0,1759,1750785,00.asp?kc=ewnws011305dtx1k0000599

UNIX developers HBX Networks have stumbled upon a bug within Google's Gmail that allows access to other users' personal e-mails. ADVERTISEMENT
By altering the "From" address field of an e-mail sent to the service, hackers could potentially find out a user's personal information, including passwords.

At first glance, to the average user the e-mail would appear normal. But by clicking "show options" within the Gmail interface, the "Reply-To" field will show HTML code that is actually a formatted version of another user's e-mail, HBX wrote on its Web site.

HBX said that they think a missing character is tripping up Gmail and causing it to print whatever is in its cache, or memory, into the Reply-To field.

The group did say much of what they saw was spam. However, what troubled them was in at least one case they were able to see a user's password.

[Garibaldi]

I have an issue when I'm in windows using firefox and I have another tab open and try logging into my gmail account causes firefox to quit. It only happens occasionally, and only on windows (never on linux). Just thought it was worth mentioned incase its related.

[canadateck]

Guess thats why they call it beta... Thanks for the heads up..

[jimmalenko]

I only use my GMail account for here ... so they can read all the reply notifications they want for all I care ...