[55081] in North American Network Operators' Group
Re: New worm / port 1434?
daemon@ATHENA.MIT.EDU (Simon Lockhart)
Sat Jan 25 07:07:15 2003
Date: Sat, 25 Jan 2003 08:48:35 +0000
From: Simon Lockhart <simonl@rd.bbc.co.uk>
To: Mike Tancsa <mike@sentex.net>
Cc: Avleen Vig <lists-nanog@silverwraith.com>, nanog@nanog.org
In-Reply-To: <5.2.0.9.0.20030125021229.0426e5d0@192.168.0.12>
Errors-To: owner-nanog-outgoing@merit.edu
On Sat Jan 25, 2003 at 02:19:04AM -0500, Mike Tancsa wrote:
> Yes, I am seeing this big time. Are you sure its SQL server ? Thats
> normally 1433 no ? Are there any other details somewhere about this ?
This URL seems to explain the exploit:
http://www.nextgenss.com/advisories/mssql-udp.txt
Simon
--
Simon Lockhart | Tel: +44 (0)1628 407720 (BBC ext 37720)
Technology Manager | Fax: +44 (0)1628 407701 (BBC ext 37701)
BBC Internet Services | Email: Simon.Lockhart@bbc.co.uk
BBC Technology, Maiden House, Vanwall Road, Maidenhead. SL6 4UB. UK
