Community mailing list archives

community@mail.odoo.com

Re: Seems Odoo just got hacked

by
Camptocamp France SAS, Alexandre Fayolle - Camptocamp
- 09/25/2015 02:42:51
Hello David,

Either I need more coffee or I don't see anything alarming here. The log
show some attempts to exploit vulnerabilities of some well known web
servers / frameworks, but you'll notice that these weird looking GET /
POST get a 404 status. AFAICT, only requests on / are getting a 200 status.

Am I missing something obvious?

Alexandre

On 24/09/2015 20:37, Jay Vora (SerpentCS) wrote:
> Good read, Thanks.
> 
> Thanks,
> Regards,
> Jay Vora.
> Serpent Consulting Services Pvt Ltd.
> M : 091-9879354457
> 
> -------- Original Message --------
> From:Kristian Koci <kristian.koci@gmail.com>
> Sent:Thu, 24 Sep 2015 23:05:24 +0530
> To:Community <community@mail.odoo.com>
> Subject:Re: Seems Odoo just got hacked
> 
> Hi, look at
> this http://askubuntu.com/questions/52649/allrequestsallowed-com-hack-attempt#
> 
> 
> 
> On Thu, Sep 24, 2015 at 12:55 PM, David Arnold <dar@devco.co
> <mailto:dar@devco.co>> wrote:
> 
>     Hi All
> 
>     A client's odoo seems to just got hacked:
> 
>     please find attached log files for your prudent analysis>
> 
>     https://gist.github.com/blaggacao/4504a3194b3ad265efa6
> 
>     Best
> 
>     David
> 
>     _______________________________________________
>     Mailing-List: https://www.odoo.com/groups/community-59
>     Post to: mailto:community@mail.odoo.com <mailto:community@mail.odoo.com>
>     Unsubscribe: https://www.odoo.com/groups?unsubscribe
> 
> 
> 
> 
> -- 
> Kristian Koci
> Linux User #582221
> Website: http://tuespacioweb.com.ve
> Cel. 0416 202 92 94
> 
>   
> 
> 
> 
> 
> 
> 
> 
> 
> 
> _______________________________________________
> Mailing-List: https://www.odoo.com/groups/community-59
> Post to: mailto:community@mail.odoo.com
> Unsubscribe: https://www.odoo.com/groups?unsubscribe
> 
> _______________________________________________
> Mailing-List: https://www.odoo.com/groups/community-59
> Post to: mailto:community@mail.odoo.com
> Unsubscribe: https://www.odoo.com/groups?unsubscribe
> 


-- 
Alexandre Fayolle
Chef de Projet
Tel : +33 4 58 48 20 30

Camptocamp France SAS
Savoie Technolac, BP 352
73377 Le Bourget du Lac Cedex
http://www.camptocamp.com