[28627] in bugtraq
Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!
daemon@ATHENA.MIT.EDU (George William Herbert)
Sat Jan 25 08:28:44 2003
Message-Id: <200301250944.BAA21830@gw.retro.com>
To: Michael Bacarella <mbac@netgraft.com>, bugtraq@securityfocus.com
Date: Sat, 25 Jan 2003 01:44:30 -0800
From: George William Herbert <gherbert@retro.com>
This is also being widely reported on the NANOG
and inetproviders lists. Check traffic outbound
from your MS SQL hosts if any. Firewall 1434/UDP
inbound and outbound if you don't already.
Tier 1 backbones are reporting a bad night: routing
instabilities, one major dropped most of its peering
for a while, the volume from this triggers the Cisco
netflow switching bug and is causing routers to lock
up at places, etc.
-george william herbert
gherbert@retro.com