Malicious actions kept at bay...
By Robert Lemos
Published: 20 August 2004 08:35 GMT
Yahoo! has fixed two flaws in its free email system that could have allowed a malicious user to read a victim's browser cookies and change the appearance of some pages.
A representative of the company said the flaws were fixed last month by making changes on the company's Yahoo! Mail servers.
A Yahoo! spokeswoman said: "We were alerted of it at the end of May, early June. There ended up being two variations of the issue: One which we could reproduce in a few days and the other which took a lot of effort to reproduce."
The vulnerabilities are of a type known as cross-site scripting flaws, which typically take advantage scripting languages and misconfigured web servers to launch attacks against a user's computer. The attacks typically redirect the user to another website, allow access to the user's cookies or, sometimes, allow the attacker to run code on the victim's computer.
Yahoo! fixed the flaws in its server code. No patch is required by the Yahoo! Mail users.
Robert Lemos writes for News.com
Who said, they fixed the bug? You... you are wrong...
junkzz
Yahhhooooo for yahoo, they fixed the bug........So...
Anonymous
You will manage a portfolio of clients and specifically improve paid search campaigns in Google, MSN and Yahoo by using techniques such as Keyword ...
In addition to the website work, the candidate will be responsible for other web design based activities such as producing HTML emails, promotional ...
You will be responsible for estimating and completing the development and unit testing of web pages, scripts, programs or modules on a specific ...
Agenda Setters 2009
Welcome to the ninth annual Agenda Setters poll – silicon.com's list of the top 50 most influential individuals in the technology and IT industries, from techies and CIOs to entrepreneurs and business leaders. Find out more in our latest special report.
Stories from the web...
Copyright © 2008 CBS Interactive Limited. All rights reserved. Top of page
Digg
Slashdot
Del.icio.us
Stumble
Reddit
RSS Feeds
Clive Longbottom Windows 7: Not perfect - but ready for prime time Microsoft's latest OS fixes most of Vista's ills - but still has challenges ahead
Stephen Kleynhans Mind the details with Windows 7 Just because it might work better than Vista, it doesn't mean you can be sloppy