[28627] in bugtraq

home help back first fref pref prev next nref lref last post

Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!

daemon@ATHENA.MIT.EDU (George William Herbert)
Sat Jan 25 08:28:44 2003

Message-Id: <200301250944.BAA21830@gw.retro.com>
To: Michael Bacarella <mbac@netgraft.com>, bugtraq@securityfocus.com
Date: Sat, 25 Jan 2003 01:44:30 -0800
From: George William Herbert <gherbert@retro.com>


This is also being widely reported on the NANOG 
and inetproviders lists.  Check traffic outbound
from your MS SQL hosts if any.  Firewall 1434/UDP
inbound and outbound if you don't already.

Tier 1 backbones are reporting a bad night: routing
instabilities, one major dropped most of its peering
for a while, the volume from this triggers the Cisco
netflow switching bug and is causing routers to lock
up at places, etc.


-george william herbert
gherbert@retro.com


home help back first fref pref prev next nref lref last post