Full Disclosure mailing list archives

FW: VERITAS Software Technical Advisory


From: "Richard M. Smith" <rms () computerbytesman com>
Date: Tue, 28 Jan 2003 17:47:57 -0500

FYI:

Dear Valued VERITAS Software Customer,

VERITAS Technical Support has recently discovered that Backup Exec 9.0
servers may be susceptible to infection by the "W32.SQLExp.Worm" (also
known as "SQL Slammer" discovered 1/24/2003). This TechAlert is to
inform you of the circumstances and/or conditions under which this
problem could occur and to provide the remedy for it. This alert was
generated because product quality and customer responsiveness are
consistent VERITAS Software hallmarks. While initial indications are
that this worm is not likely to directly threaten your data, any issues
that could potentially affect your data, no matter how rare, are viewed
as extremely serious.

This worm can affect any server running Microsoft SQL and/or Microsoft
MSDE 2000 components. Backup Exec for Windows 9.0 servers may be
susceptible as it includes MSDE 2000 components with the installation
that are affected by this virus. This issue may be resolved by running
the Microsoft patch identified in the link below. The Microsoft patch
will work with the version of MSDE included with Backup Exec 9.0. SQL
2000 and other installations of MSDE may require additional patches. For
more information, refer to the documentation accompanying the Microsoft
patch which can be downloaded from the following link:

http://www.microsoft.com/Downloads/Release.asp?ReleaseID=40602

It will be necessary to reboot after this patch is installed.

For more information, please visit:

Microsoft security bulletin:
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/secur
ity/bulletin/MS02-039.asp


Symantec Security Response information:
http://www.symantec.com/avcenter/venc/data/w32.sqlexp.worm.html

VERITAS TechNote:
http://support.veritas.com/docs/254244

 Sincerely,

 VERITAS Software Corporation

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: