[55091] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: New worm / port 1434?

daemon@ATHENA.MIT.EDU (Adam \"Tauvix\" Debus)
Sat Jan 25 08:04:54 2003

From: "Adam \"Tauvix\" Debus" <nanog@delsol.net>
To: <nanog@nanog.org>
Date: Sat, 25 Jan 2003 00:46:08 -0800
Errors-To: owner-nanog-outgoing@merit.edu


1434 is the SQL Server Resolution Service.

Unfortunately, this appears to be a whole new thing, I was unable to find
anything more recent then May of 2002 about security issues with this port.

Thanks,

Adam Debus
Network Administrator, ReachONE Internet
adam@reachone.com

----- Original Message -----
From: "Mike Tancsa" <mike@sentex.net>
To: "Avleen Vig" <lists-nanog@silverwraith.com>
Cc: <nanog@nanog.org>
Sent: Friday, January 24, 2003 11:19 PM
Subject: Re: New worm / port 1434?


>
>
> Yes, I am seeing this big time.  Are you sure its SQL server ?  Thats
> normally 1433 no ?  Are there any other details somewhere about this ?
>
> At 10:32 PM 1/24/2003 -0800, Avleen Vig wrote:
>
> >It seems we have a new worm hitting Microsoft SQL server servers on port
> >1434.
>
> --------------------------------------------------------------------
> Mike Tancsa,                                    tel +1 519 651 3400
> Sentex Communications,       mike@sentex.net
> Providing Internet since 1994                    www.sentex.net
> Cambridge, Ontario Canada   www.sentex.net/mike
>
>



home help back first fref pref prev next nref lref last post