[55094] in North American Network Operators' Group
Re: New worm / port 1434?
daemon@ATHENA.MIT.EDU (Jack Bates)
Sat Jan 25 08:31:00 2003
From: "Jack Bates" <jbates@brightok.net>
To: "Avleen Vig" <lists-nanog@silverwraith.com>,
"Mike Tancsa" <mike@sentex.net>
Cc: <nanog@nanog.org>
Date: Sat, 25 Jan 2003 02:45:13 -0600
Errors-To: owner-nanog-outgoing@merit.edu
From: "Mike Tancsa"
>
>
> Yes, I am seeing this big time. Are you sure its SQL server ? Thats
> normally 1433 no ? Are there any other details somewhere about this ?
>
<snip>
All MS SQL servers listen to 1434 reguardless of the other ports they listen
on. Depending on configuration depends on what other ports it uses (due to
various security models), but 1434 is a constant in all configurations
according to a quick search and a read on the last MS SQL vulnerability
found in 7/2002.
Jack Bates
BrightNet Oklahoma
