IETF Logo Mail Archive

Re: [ietf-822] inventive syntax, at least

Arnt Gulbrandsen <arnt@gulbrandsen.priv.no> Wed, 12 November 2014 18:28 UTC

Return-Path: <arnt@gulbrandsen.priv.no>
X-Original-To: ietf-822@ietfa.amsl.com
Delivered-To: ietf-822@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1EC5F1AC39D for <ietf-822@ietfa.amsl.com>; Wed, 12 Nov 2014 10:28:47 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id llai-2DXjoPH for <ietf-822@ietfa.amsl.com>; Wed, 12 Nov 2014 10:28:43 -0800 (PST)
Received: from strange.aox.org (strange.aox.org [80.244.248.170]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8CDFC1A914F for <ietf-822@ietf.org>; Wed, 12 Nov 2014 10:28:43 -0800 (PST)
Received: from fri.gulbrandsen.priv.no (localhost [127.0.0.1]) by strange.aox.org (Postfix) with ESMTP id 2557BFA0077; Wed, 12 Nov 2014 18:28:40 +0000 (UTC)
Received: from arnt@gulbrandsen.priv.no by fri.gulbrandsen.priv.no (Archiveopteryx 3.2.0) with esmtpsa id 1415816919-4330-4329/12/139; Wed, 12 Nov 2014 18:28:39 +0000
From: Arnt Gulbrandsen <arnt@gulbrandsen.priv.no>
To: "Murray S. Kucherawy" <superuser@gmail.com>
Date: Wed, 12 Nov 2014 19:28:39 +0100
User-Agent: Trojita/v0.4.1-243-g4a74770; Qt/4.8.6; X11; Linux; Ubuntu 14.04.1 LTS
Mime-Version: 1.0
Message-Id: <6d9c88ba-ad4f-4527-826d-a7f63ddface1@gulbrandsen.priv.no>
In-Reply-To: <CAL0qLwZ6nUA-XECaAK8=GZ+br5vEaOD+WYG7Y2ogweD-Xrs2Pw@mail.gmail.com>
References: <96210782-74c2-4fe6-a478-086cf474c37e@gulbrandsen.priv.no> <CAL0qLwZ6nUA-XECaAK8=GZ+br5vEaOD+WYG7Y2ogweD-Xrs2Pw@mail.gmail.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Archived-At: http://mailarchive.ietf.org/arch/msg/ietf-822/XNTx90cKZGe_5DG6zw6ApAI7Trk
Cc: ietf-822@ietf.org
Subject: Re: [ietf-822] inventive syntax, at least
X-BeenThere: ietf-822@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "Discussion of issues related to Internet Message Format \[RFC 822, RFC 2822, RFC 5322\]" <ietf-822.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf-822>, <mailto:ietf-822-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ietf-822/>
List-Post: <mailto:ietf-822@ietf.org>
List-Help: <mailto:ietf-822-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf-822>, <mailto:ietf-822-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 12 Nov 2014 18:28:47 -0000

On Wednesday, November 12, 2014 7:24:44 PM CEST, Murray S. Kucherawy wrote:
> Looks vaguely like the recent bash attack.

Yes. It's trying to see whether anyone's handling To, References, Cc, From, 
Subject, Date, Message-ID, Comments, Keywords, Resent-Date, Resent-From or 
Resent-Sender using bash. But is anyone falling for it? I'm curious.

Arnt

v2.23.0 | Report a Bug | By Email