Re: New worm / port 1434?

["Adam \"Tauvix\" Debus" <nanog () delsol net>]

We were hit hard by this as well. It appears to be a buffer overflow
exploit, as blocking the ports on my router and restarting MS SQL put a stop
to it.

Thanks,

Adam Debus
Network Administrator, ReachONE Internet
adam () reachone com

----- Original Message -----
From: "Avleen Vig" <lists-nanog () silverwraith com>
To: <nanog () nanog org>
Sent: Friday, January 24, 2003 10:32 PM
Subject: New worm / port 1434?


> It seems we have a new worm hitting Microsoft SQL server servers on port
> 1434.