[28631] in bugtraq

home help back first fref pref prev next nref lref last post

Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!

daemon@ATHENA.MIT.EDU (Jay D. Dyson)
Sat Jan 25 09:12:22 2003

Date: Sat, 25 Jan 2003 03:35:55 -0800 (PST)
From: "Jay D. Dyson" <jdyson@treachery.net>
To: Bugtraq <bugtraq@securityfocus.com>
In-Reply-To: <20030125111729.25893.qmail@mail.securityfocus.com>
Message-ID: <Pine.GSO.3.96.1030125033158.17950A-100000@crypto>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 25 Jan 2003, Umit Tiric wrote:

> We can confirm it here in Toronto, Canada. Even though the effect was
> minimal to us, we saw many major networks dissappear on the Internet. 

	We're seeing large network disruption here in Los Angeles.  Right
now, packet loss is running at roughly 95%.  (This is not a typo.  I do
mean *ninety-five percent* packet loss.)

> You have to patch your MS-SQL Server to the highest service pack. 

	More details available here:

	http://www.kb.cert.org/vuls/id/370308
	http://www.kb.cert.org/vuls/id/399260
	http://www.kb.cert.org/vuls/id/484891

	And to think...up until tonight, I thought the vulnerabilities
that paved the way for Nimda were the worst that Microsoft could do to the
net.community.  They've really topped themselves this time.

- -Jay

   (    (                                                         _______
   ))   ))   .-"There's always time for a good cup of coffee."-.   >====<--.
 C|~~|C|~~| (>------ Jay D. Dyson - jdyson@treachery.net ------<) |    = |-'
  `--' `--'  `How about a 10-day waiting period on YOUR rights?'  `------'

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (TreacherOS)
Comment: See http://www.treachery.net/~jdyson/ for current keys.

iD8DBQE+MnagTqL/+mXtpucRAjD0AJ9QEhwxeEdzn/s7d7M2Fs+Q6a7jjACdEAAN
krgyU75949WTlrDdKrsrQLc=
=mmPu
-----END PGP SIGNATURE-----


home help back first fref pref prev next nref lref last post