nanog mailing list archives

Re: New worm / port 1434?


From: Gary Coates <gary () newnet co uk>
Date: Sat, 25 Jan 2003 08:05:33 +0000


Duplicated info.. But this is an old worm ;-(

http://www.cert.org/advisories/CA-1996-01.html

Pete Ashdown wrote:
* Avleen Vig (lists-nanog () silverwraith com) [030124 23:50] writeth:

It seems we have a new worm hitting Microsoft SQL server servers on port
1434.


Affirmative.  Be sure to block 1434 UDP on both the inbound and the
outbound.  Infected servers are VERY NOISY.




--
____________________________________________________
Message scanned for viruses and dangerous content by
<http://www.newnet.co.uk/av/> and believed to be clean


Current thread: