This is the mail archive of the gcc@gcc.gnu.org mailing list for the GCC project.

Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

Headsup: Rogue or hacked account spamming via RT? re: [gnu.org #263454]

    Hello GNU webmasters,

  I hope this is the right place to report what appears to be a problem at
rt.gnu.org, I couldn't find an explicit contact address for it.

  We just got two posts on the GCC mailing list with the subject line
"[gnu.org #263454] Take home $204,000.00 this month":

http://gcc.gnu.org/ml/gcc/2009-09/msg00650.html
http://gcc.gnu.org/ml/gcc/2009-09/msg00651.html

and according to the headers (visible by the "raw text" links at the above
URLs) these appear to have genuinely originated at rt.gnu.org via the web
interface:

> From gcc-return-156943-listarch-gcc=gcc dot gnu dot org at gcc dot gnu dot org Wed Sep 30 21:26:16 2009
> Return-Path: <gcc-return-156943-listarch-gcc=gcc dot gnu dot org at gcc dot gnu dot org>
> Delivered-To: listarch-gcc at gcc dot gnu dot org
> Received: (qmail 965 invoked by alias); 30 Sep 2009 21:26:15 -0000
> Received: (qmail 927 invoked by uid 22791); 30 Sep 2009 21:26:14 -0000
> X-SWARE-Spam-Status: No, hits=3.3 required=5.0 	tests=BAYES_20,CTYME_IXHASH,GENERIC_IXHASH,SPF_PASS
> X-Spam-Check-By: sourceware.org
> Received: from fencepost.gnu.org (HELO fencepost.gnu.org) (140.186.70.10)     by sourceware.org (qpsmtpd/0.43rc1) with ESMTP; Wed, 30 Sep 2009 21:26:12 +0000
> Received: from mail.gnu.org ([199.232.76.166]:35875 helo=mx10.gnu.org) 	by fencepost.gnu.org with esmtp (Exim 4.67) 	(envelope-from <www-data@gnu.org>) 	id 1Mt6gc-0000aj-Hs 	for gcc@gnu.org; Wed, 30 Sep 2009 17:26:10 -0400
> Received: from Debian-exim by monty-python.gnu.org with spam-scanned (Exim 4.60) 	(envelope-from <www-data@gnu.org>) 	id 1Mt6gN-0003BZ-IS 	for gcc@gnu.org; Wed, 30 Sep 2009 17:26:09 -0400
> Received: from rt.gnu.org ([199.232.76.167]:48703) 	by monty-python.gnu.org with esmtps (TLS-1.0:RSA_AES_256_CBC_SHA1:32) 	(Exim 4.60) 	(envelope-from <www-data@gnu.org>) 	id 1Mt6fy-00034y-H1; Wed, 30 Sep 2009 17:25:31 -0400
> Received: from www-data by rt.gnu.org with local (Exim 4.69) 	(envelope-from <www-data@gnu.org>) 	id 1Mt6lf-0007l4-40; Wed, 30 Sep 2009 17:31:23 -0400
> Subject: [gnu.org #263454] Take home $204,000.00 this month
> From: "Jose E dot  Marchesi via RT" <tasks at gnu dot org>
> Reply-To: tasks at gnu dot org
> In-Reply-To:
> References: <RT-Ticket-263454@rt.gnu.org>
> Message-ID: <rt-3.4.5-24773-1254346282-1391.263454-5-0@rt.gnu.org>
> X-RT-Loop-Prevention: gnu.org
> RT-Ticket: gnu.org #263454
> Managed-by: RT 3.4.5 (http://www.bestpractical.com/rt/)
> RT-Originator: jemarch@gnu.org

  Somebody with administrative access probably needs to take an urgent look at
who's in control of the "jemarch" account, I think.

    cheers,
      DaveK
Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]