nanog mailing list archives

Re: New worm / port 1434?

From: Simon Lockhart <simonl () rd bbc co uk>
Date: Sat, 25 Jan 2003 08:48:35 +0000


On Sat Jan 25, 2003 at 02:19:04AM -0500, Mike Tancsa wrote:

Yes, I am seeing this big time.  Are you sure its SQL server ?  Thats 
normally 1433 no ?  Are there any other details somewhere about this ?


This URL seems to explain the exploit:

        http://www.nextgenss.com/advisories/mssql-udp.txt

Simon
-- 
Simon Lockhart             |   Tel: +44 (0)1628 407720  (BBC ext 37720)
Technology Manager         |   Fax: +44 (0)1628 407701  (BBC ext 37701)
BBC Internet Services      | Email: Simon.Lockhart () bbc co uk 
BBC Technology, Maiden House, Vanwall Road, Maidenhead. SL6 4UB. UK

Current thread:

Re: New worm / port 1434?, (continued)
- Re: New worm / port 1434? Dave Stewart (Jan 24)
  - Re: New worm / port 1434? Lloyd Taylor (Jan 25)
- Re: New worm / port 1434? Pete Ashdown (Jan 24)
  - Re: New worm / port 1434? Gary Coates (Jan 25)
    - Re: New worm / port 1434? Peter van Dijk (Jan 25)
  - Re: New worm / port 1434? Dr. Mosh (Jan 25)
- Re: New worm / port 1434? Josh Richards (Jan 25)
  - Re: New worm / port 1434? Jake Khuon (Jan 25)
  - Re: New worm / port 1434? Josh Richards (Jan 25)
- Re: New worm / port 1434? Mike Tancsa (Jan 25)
  - Re: New worm / port 1434? Simon Lockhart (Jan 25)
    - Re: New worm / port 1434? Curtis Maurand (Jan 25)
  - Re: New worm / port 1434? Adam "Tauvix" Debus (Jan 25)
  - Re: New worm / port 1434? Jack Bates (Jan 25)
    - Re: New worm / port 1434? Mike Tancsa (Jan 25)
- Re: New worm / port 1434? Troy Rader (Jan 25)
- Re: New worm / port 1434? Mark Radabaugh (Jan 25)
  - Re: New worm / port 1434? Scott Call (Jan 25)
- Re: New worm / port 1434? Adam "Tauvix" Debus (Jan 25)
- Re: New worm / port 1434? K. Scott Bethke (Jan 25)
  - Re: New worm / port 1434? Neil J. McRae (Jan 25)

(Thread continues...)