[28684] in bugtraq
RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!
daemon@ATHENA.MIT.EDU (trent dilkie)
Tue Jan 28 12:00:24 2003
From: "trent dilkie" <trent@dilkie.com>
To: <bugtraq@securityfocus.com>
Date: Mon, 27 Jan 2003 22:04:59 -0500
Message-ID: <001001c2c67a$0e7bcf60$a500a8c0@STING>
MIME-Version: 1.0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 8bit
Symantec has posted a new version (1.0.3) that correctly identifies an
unpatched MSDE installation.
Thanks to David @ Symantec for following up with me, the tool can be
downloaded at:
http://securityresponse.symantec.com/avcenter/venc/data/w32.sqlexp.worm.remo
val.tool.html
Trent.
-----Original Message-----
From: trent dilkie [mailto:trent@dilkie.com]
Sent: Monday, January 27, 2003 12:46 PM
To: 'bugtraq@securityfocus.com'
Subject: RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!
I just got a confirmation from Symantec. The fixSQLex.exe tool
(
http://securityresponse.symantec.com/avcenter/venc/data/w32.sqlexp.worm.remo
val.tool.html )
DOES NOT DETECT or fix MSDE, only SQL Server. They are working on an
update, it should be posted today.
Trent.
