Re: New worm / port 1434?

["Adam \"Tauvix\" Debus" <nanog () delsol net>]

1434 is the SQL Server Resolution Service.

Unfortunately, this appears to be a whole new thing, I was unable to find
anything more recent then May of 2002 about security issues with this port.

Thanks,

Adam Debus
Network Administrator, ReachONE Internet
adam () reachone com

----- Original Message -----
From: "Mike Tancsa" <mike () sentex net>
To: "Avleen Vig" <lists-nanog () silverwraith com>
Cc: <nanog () nanog org>
Sent: Friday, January 24, 2003 11:19 PM
Subject: Re: New worm / port 1434?


> Yes, I am seeing this big time.  Are you sure its SQL server ?  Thats
> normally 1433 no ?  Are there any other details somewhere about this ?
>
> At 10:32 PM 1/24/2003 -0800, Avleen Vig wrote:
>
> > It seems we have a new worm hitting Microsoft SQL server servers on port
> > 1434.
>
> --------------------------------------------------------------------
> Mike Tancsa,                                    tel +1 519 651 3400
> Sentex Communications,       mike () sentex net
> Providing Internet since 1994                    www.sentex.net
> Cambridge, Ontario Canada   www.sentex.net/mike