RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!

["trent dilkie" <trent () dilkie com>]

Symantec has posted a new version (1.0.3) that correctly identifies an
unpatched MSDE installation.

Thanks to David @ Symantec for following up with me, the tool can be
downloaded at:
http://securityresponse.symantec.com/avcenter/venc/data/w32.sqlexp.worm.remo
val.tool.html

Trent.

-----Original Message-----
From: trent dilkie [mailto:trent () dilkie com] 
Sent: Monday, January 27, 2003 12:46 PM
To: 'bugtraq () securityfocus com'
Subject: RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!



I just got a confirmation from Symantec. The fixSQLex.exe tool

 (
http://securityresponse.symantec.com/avcenter/venc/data/w32.sqlexp.worm.remo
val.tool.html ) 

DOES NOT DETECT or fix MSDE, only SQL Server.  They are working on an
update, it should be posted today.

Trent.