[55169] in North American Network Operators' Group
Re: New worm / port 1434?
daemon@ATHENA.MIT.EDU (Curtis Maurand)
Sat Jan 25 15:41:06 2003
From: "Curtis Maurand" <curtis@maurand.com>
To: "Simon Lockhart" <simonl@rd.bbc.co.uk>,
"Mike Tancsa" <mike@sentex.net>
Cc: "Avleen Vig" <lists-nanog@silverwraith.com>, <nanog@nanog.org>
Date: Sat, 25 Jan 2003 14:00:11 -0500
Errors-To: owner-nanog-outgoing@merit.edu
http://securityresponse.symantec.com/avcenter/venc/data/w32.sqlexp.wor
m.html
----- Original Message -----
From: "Simon Lockhart" <simonl@rd.bbc.co.uk>
To: "Mike Tancsa" <mike@sentex.net>
Cc: "Avleen Vig" <lists-nanog@silverwraith.com>; <nanog@nanog.org>
Sent: Saturday, January 25, 2003 3:48 AM
Subject: Re: New worm / port 1434?
>
> On Sat Jan 25, 2003 at 02:19:04AM -0500, Mike Tancsa wrote:
> > Yes, I am seeing this big time. Are you sure its SQL server ?
Thats
> > normally 1433 no ? Are there any other details somewhere about
this ?
>
> This URL seems to explain the exploit:
>
> http://www.nextgenss.com/advisories/mssql-udp.txt
>
> Simon
> --
> Simon Lockhart | Tel: +44 (0)1628 407720 (BBC ext
37720)
> Technology Manager | Fax: +44 (0)1628 407701 (BBC ext
37701)
> BBC Internet Services | Email: Simon.Lockhart@bbc.co.uk
> BBC Technology, Maiden House, Vanwall Road, Maidenhead. SL6 4UB. UK
>
