Mailing List Archive: DBMail: users

dbmail.org down

Index | Next | Previous | View Threaded

paul at nfg

Jan 26, 2009, 3:20 AM

Post #1 of 7 (621 views)
Permalink

dbmail.org down

Looks like someone at IC&S decided to mess with the www.dbmail.org site
without so much as a headsup (afaik).

The tracker is down, and I lost ssh access.

Keep ya posted.

--
________________________________________________________________
Paul Stevens paul at nfg.nl
NET FACILITIES GROUP GPG/PGP: 1024D/11F8CD31
The Netherlands________________________________http://www.nfg.nl
_______________________________________________
DBmail mailing list
DBmail[at]dbmail.org
https://mailman.fastxs.nl/mailman/listinfo/dbmail

paul at nfg

Jan 26, 2009, 4:39 AM

Post #2 of 7 (583 views)
Permalink

Re: dbmail.org down [In reply to]

Ok,

So the machine involved was hacked through a security hole in mantis.

I'll upgrade mantis.

Paul J Stevens wrote:
> Looks like someone at IC&S decided to mess with the www.dbmail.org site
> without so much as a headsup (afaik).
>
> The tracker is down, and I lost ssh access.
>
> Keep ya posted.
>

--
________________________________________________________________
Paul Stevens paul at nfg.nl
NET FACILITIES GROUP GPG/PGP: 1024D/11F8CD31
The Netherlands________________________________http://www.nfg.nl
_______________________________________________
DBmail mailing list
DBmail[at]dbmail.org
https://mailman.fastxs.nl/mailman/listinfo/dbmail

paul at nfg

Jan 26, 2009, 5:01 AM

Post #3 of 7 (583 views)
Permalink

Re: dbmail.org down [fixed] [In reply to]

Mantis is now back up and running again.

Paul J Stevens wrote:
> Ok,
>
> So the machine involved was hacked through a security hole in mantis.
>
> I'll upgrade mantis.
>
> Paul J Stevens wrote:
>> Looks like someone at IC&S decided to mess with the www.dbmail.org site
>> without so much as a headsup (afaik).
>>
>> The tracker is down, and I lost ssh access.
>>
>> Keep ya posted.
>>
>
>

--
________________________________________________________________
Paul Stevens paul at nfg.nl
NET FACILITIES GROUP GPG/PGP: 1024D/11F8CD31
The Netherlands________________________________http://www.nfg.nl
_______________________________________________
DBmail mailing list
DBmail[at]dbmail.org
https://mailman.fastxs.nl/mailman/listinfo/dbmail

mysql.jorge at decimal

Jan 26, 2009, 5:09 AM

Post #4 of 7 (582 views)
Permalink

RE: dbmail.org down [fixed] [In reply to]

Something's not right,
http://www.dbmail.org/mantis/view.php?id=755

It doesn't show the details returning a SQL error.

APPLICATION ERROR #401

Database query failed. Error received from database was #1146: Table
'dbmail_mantis.mantis_tag_table' doesn't exist for the query: SELECT t.*,
b.user_id as user_attached, b.date_attached
FROM mantis_tag_table as t
LEFT JOIN mantis_bug_tag_table as b
on t.id=b.tag_id
WHERE b.bug_id='755'.

> -----Original Message-----
> From: dbmail-bounces[at]dbmail.org [mailto:dbmail-bounces[at]dbmail.org] On
> Behalf Of Paul J Stevens
> Sent: segunda-feira, 26 de Janeiro de 2009 13:02
> To: DBMail mailinglist
> Subject: Re: [Dbmail] dbmail.org down [fixed]
>
>
> Mantis is now back up and running again.
>
>
>
> Paul J Stevens wrote:
> > Ok,
> >
> > So the machine involved was hacked through a security hole in mantis.
> >
> > I'll upgrade mantis.
> >
> > Paul J Stevens wrote:
> >> Looks like someone at IC&S decided to mess with the www.dbmail.org
> site
> >> without so much as a headsup (afaik).
> >>
> >> The tracker is down, and I lost ssh access.
> >>
> >> Keep ya posted.
> >>
> >
> >
>
>
> --
> ________________________________________________________________
> Paul Stevens paul at nfg.nl
> NET FACILITIES GROUP GPG/PGP: 1024D/11F8CD31
> The Netherlands________________________________http://www.nfg.nl
> _______________________________________________
> DBmail mailing list
> DBmail[at]dbmail.org
> https://mailman.fastxs.nl/mailman/listinfo/dbmail

_______________________________________________
DBmail mailing list
DBmail[at]dbmail.org
https://mailman.fastxs.nl/mailman/listinfo/dbmail

paul at nfg

Jan 26, 2009, 5:41 AM

Post #5 of 7 (581 views)
Permalink

Re: dbmail.org down [fixed] [In reply to]

Thanks Jorge.

Jorge Bastos wrote:
> Something's not right,
> http://www.dbmail.org/mantis/view.php?id=755
>
> It doesn't show the details returning a SQL error.
>
> APPLICATION ERROR #401
>
> Database query failed. Error received from database was #1146: Table
> 'dbmail_mantis.mantis_tag_table' doesn't exist for the query: SELECT t.*,
> b.user_id as user_attached, b.date_attached
> FROM mantis_tag_table as t
> LEFT JOIN mantis_bug_tag_table as b
> on t.id=b.tag_id
> WHERE b.bug_id='755'.
>
>
>
>> -----Original Message-----
>> From: dbmail-bounces[at]dbmail.org [mailto:dbmail-bounces[at]dbmail.org] On
>> Behalf Of Paul J Stevens
>> Sent: segunda-feira, 26 de Janeiro de 2009 13:02
>> To: DBMail mailinglist
>> Subject: Re: [Dbmail] dbmail.org down [fixed]
>>
>>
>> Mantis is now back up and running again.
>>
>>
>>
>> Paul J Stevens wrote:
>>> Ok,
>>>
>>> So the machine involved was hacked through a security hole in mantis.
>>>
>>> I'll upgrade mantis.
>>>
>>> Paul J Stevens wrote:
>>>> Looks like someone at IC&S decided to mess with the www.dbmail.org
>> site
>>>> without so much as a headsup (afaik).
>>>>
>>>> The tracker is down, and I lost ssh access.
>>>>
>>>> Keep ya posted.
>>>>
>>>
>>
>> --
>> ________________________________________________________________
>> Paul Stevens paul at nfg.nl
>> NET FACILITIES GROUP GPG/PGP: 1024D/11F8CD31
>> The Netherlands________________________________http://www.nfg.nl
>> _______________________________________________
>> DBmail mailing list
>> DBmail[at]dbmail.org
>> https://mailman.fastxs.nl/mailman/listinfo/dbmail
>
> _______________________________________________
> DBmail mailing list
> DBmail[at]dbmail.org
> https://mailman.fastxs.nl/mailman/listinfo/dbmail
>

--
________________________________________________________________
Paul Stevens paul at nfg.nl
NET FACILITIES GROUP GPG/PGP: 1024D/11F8CD31
The Netherlands________________________________http://www.nfg.nl
_______________________________________________
DBmail mailing list
DBmail[at]dbmail.org
https://mailman.fastxs.nl/mailman/listinfo/dbmail

leonel at enelserver

Jan 26, 2009, 7:13 AM

Post #6 of 7 (581 views)
Permalink

Re: dbmail.org down [fixed] [In reply to]

Paul J Stevens wrote:
> Mantis is now back up and running again.
>
>
>
> Paul J Stevens wrote:
>
>> Ok,
>>
>> So the machine involved was hacked through a security hole in mantis.
>>
>> I'll upgrade mantis.
>>
>> Paul J Stevens wrote:
>>
>>> Looks like someone at IC&S decided to mess with the www.dbmail.org site
>>> without so much as a headsup (afaik).
>>>
>>> The tracker is down, and I lost ssh access.
>>>
>>> Keep ya posted.
>>>
>>>
>>
>
>
>

are the tar.gz files and the git server safe from this event ??

Just asking..

Thank You

Leonel

_______________________________________________
DBmail mailing list
DBmail[at]dbmail.org
https://mailman.fastxs.nl/mailman/listinfo/dbmail

paul at nfg

Jan 26, 2009, 9:21 AM

Post #7 of 7 (582 views)
Permalink

Re: dbmail.org down [fixed] [In reply to]

Leonel Nunez wrote:
> are the tar.gz files and the git server safe from this event ??

Yes. No damage was done afaik. Some twit installed a bot in some tmp dir.

But: I don't manage or control the machine hosting www.dbmail.org so I
have to go by the info provided by IC&S.

The git server(s) do run on hosts I manage. They were not affected.

--
________________________________________________________________
Paul Stevens paul at nfg.nl
NET FACILITIES GROUP GPG/PGP: 1024D/11F8CD31
The Netherlands________________________________http://www.nfg.nl
_______________________________________________
DBmail mailing list
DBmail[at]dbmail.org
https://mailman.fastxs.nl/mailman/listinfo/dbmail

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact lists@gossamer-threads.com