Yahoo mail flaws fixed
Published: 20 Aug 2004 09:05 BST
Yahoo fixed two flaws in its free mail system that could have allowed a malicious user to read a victim's browser cookies and change the appearance of some pages, Yahoo said on Thursday.
A representative of the company said the flaws were fixed last month by making changes on the company's Yahoo Mail servers.
"We were alerted of it at the end of May, early June," spokeswoman Mary Osako said. "There ended up being two variations of the issue: one which we could reproduce in a few days and the other which took a lot of effort to reproduce."
The vulnerabilities are of a type known as cross-site scripting flaws, which typically take advantage of scripting languages and misconfigured Web servers to launch attacks against a user's computer. The attacks typically redirect the user to another Web site, allow access to the user's cookies or, sometimes, allow the attacker to run code on the victim's computer.
Yahoo fixed the flaws in its server code. No patch is required by the Yahoo Mail users.
Did you find this article useful?
73 out of 139 people found this useful
Digg
Slashdot
Del.ici.ous
Stumble
Reddit
Full Talkback thread
2 comments
-
I am pleased to read that your problems have been... Richared Oblander -
I wonder flaws have been fixed or rejuvinated, but... Anonymous
