10/21/2004

Gmail Drive Vulnerability Reported

Per a OSVDB report, Bjarke Viksoe's Gmail Drive 1.2 contains a flaw that may lead to an unauthorized information disclosure. The issue is due to the program naming the drive based on the Gmail account login name, resulting in a loss of confidentiality.

GMail Drive is a Shell Namespace Extension that creates a virtual filesystem around your Google GMail account, allowing you to use GMail as a storage medium.

Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

No comments: