|
MS SQL Server Worm Cripples Internet |
|
|
Internet traffic slowed to a crawl early Saturday morning as a virus-like worm exploited a known flaw in Microsoft SQL Server 2000 and flooded the world's digital backbones. The attack used a buffer overflow to execute code on a vulnerable SQL Server, causing that system to randomly seek out other computers to infect and in the process consume massive amounts of bandwidth.
Major Internet providers began to block the malicious traffic by mid-morning, although UUNet continued to report major slowdowns.
Microsoft issued a security bulletin and patch for the SQL Server 2000 flaw last July, but many network administrators had apparently not updated their systems. One such administrator told BetaNews that a tool offered by Microsoft to confirm all hot fixes were applied, HFNetChk, did not correctly identify the missing patch.
The worm specifically targeted UDP port 1434 in order to find SQL Servers to compromise. By blocking all traffic on that port and the primary SQL Server port, 1433, network administrators were able to quell the floods. Affected servers had to be rebooted in order to stop the flow of data.
Article source and further details:  Beta News
Real-time charts posted at Matrix NetSystems Inc..
Check out these charts:
Packet Loss
Reachability
Resources
Standalone Patch:
 http://www.microsoft.com/technet/security/bulletin/MS02-039.asp
SQL 2000 Service Pack 3:
http://www.microsoft.com/sql/downloads/2000/sp3.asp
More Resources
http://support.microsoft.com/support/misc/kblookup.asp?id=Q323875
http://www.microsoft.com/technet/prodtechnol/sql/maintain/security/sql2ksec.asp
Symantec Security Response - W32.SQLExp.Worm
CERT® Advisory CA-2003-04 MS-SQL Server Worm
Microsoft SQL Sapphire Worm Analysis
|
|
|
 |
| "MS SQL Server Worm Cripples Internet" | Login/Create an Account | 1 comment | Search |
|
| | The comments are owned by the poster. We aren't responsible for their content. |
|
|
|
No Comments Allowed for Anonymous, please register |
|
| |
|
Login |
|
 |
|
|
|
|
· New User? · Click here to create a registered account.
|
|
|
Article Rating |
|
|
|
|
|
|
Average Score: 5
Votes: 2
|
|
|
