VERITAS Software Technical Advisory (fwd)

[Dave Ahmad <da () securityfocus com>]

David Mirza Ahmad
Symantec

0x26005712
8D 9A B1 33 82 3D B3 D0 40 EB  AB F0 1E 67 C6 1A 26 00 57 12

---------- Forwarded message ----------
Return-Path: <Technical_Services () maillist support veritas com>
Delivered-To: da () mail securityfocus com
Received: (qmail 1157 invoked by alias); 26 Jan 2003 04:53:18 -0000
Received: (qmail 1154 invoked from network); 26 Jan 2003 04:53:18 -0000
Received: from maillist.east.veritas.com (HELO nsmg.veritas.com)
    (207.30.27.51)
  by mail.securityfocus.com with SMTP; 26 Jan 2003 04:53:18 -0000
X-Mailer: UnityMail
Errors-To: <Technical_Services () maillist support veritas com>
Originator: <Technical_Services () maillist support veritas com>
X-UnityID:
    <20030125234152.AZECLBCXPACACGUhrolstsrv0.79869 () hrolstsrv02 nsmg veritas com
    >
X-UnityUser: Veritas
X-Mailer-Version: 4.0.425
From: "Technical_Services" <Technical_Services () maillist support veritas com>
To: "Technical_Services" <Technical_Services () maillist support veritas com>
Subject: VERITAS Software Technical Advisory
Date: Sat, 25 Jan 2003 23:41:52 -0500
MIME-Version: 1.0
Content-Type: text/plain;
        charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Thread-Index: AcLE9T8raU1OGz7/Sy+uMUii6EjUZw==
Content-Class: urn:content-classes:message
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300

Dear Valued VERITAS Software Customer,

VERITAS Technical Support has recently discovered that Backup Exec 9.0
servers may be susceptible to infection by the "W32.SQLExp.Worm" (also
known as "SQL Slammer" discovered 1/24/2003). This TechAlert is to
inform you of the circumstances and/or conditions under which this
problem could occur and to provide the remedy for it. This alert was
generated because product quality and customer responsiveness are
consistent VERITAS Software hallmarks. While initial indications are
that this worm is not likely to directly threaten your data, any issues
that could potentially affect your data, no matter how rare, are viewed
as extremely serious.

This worm can affect any server running Microsoft SQL and/or Microsoft
MSDE 2000 components. Backup Exec for Windows 9.0 servers may be
susceptible as it includes MSDE 2000 components with the installation
that are affected by this virus. This issue may be resolved by running
the Microsoft patch identified in the link below. The Microsoft patch
will work with the version of MSDE included with Backup Exec 9.0. SQL
2000 and other installations of MSDE may require additional patches. For
more information, refer to the documentation accompanying the Microsoft
patch which can be downloaded from the following link:

http://www.microsoft.com/Downloads/Release.asp?ReleaseID=40602

It will be necessary to reboot after this patch is installed.

For more information, please visit:

Microsoft security bulletin:
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS02-039.asp


Symantec Security Response information:
http://www.symantec.com/avcenter/venc/data/w32.sqlexp.worm.html

VERITAS TechNote:
http://support.veritas.com/docs/254244

 Sincerely,

 VERITAS Software Corporation


___________________________________________________________
**************
*PLEASE NOTE:*
**************
Email format restrictions may not allow a URL to fit on one line.  Thus,
when you click the URL line in the email message, you may get a browser
error (e.g., non-existent link). If the URL does not seem to work,
please make certain you select, copy, and then paste the entire link
address into your browser's target address field.
____________________________________________________________

How to use this mailing list..

You received this e-mail newsletter as a result of your registration on
the VERITAS Email Notification System. To fully unsubscribe, send a
blank email to mailto:@maillist.support.veritas.com (if the
email address is not clickable, simply copy the text to the right of the
'mailto:&apos; command and paste it into your email application and hit
send).

To further define your communication preferences with VERITAS including
subscriptions and removals from any Technical Support list, please
visit:
http://maillist.support.veritas.com/infotype_select.asp?EmailAddress=xxxxxxxx () securityfocus com


THIS DOCUMENT IS PROVIDED FOR INFORMATIONAL PURPOSES ONLY. The
information contained in this document represents the current view of
VERITAS Software Corporation on the issues discussed as of the date of
publication. Because VERITAS must respond to change in market
conditions, it should not be interpreted to be a commitment on the part
of VERITAS and VERITAS cannot guarantee the accuracy of any information
presented after the date of publication. INFORMATION PROVIDED IN THIS
DOCUMENT IS PROVIDED 'AS IS' WITHOUT WARRANTY OF ANY KIND, EITHER
EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES
OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND FREEDOM FROM
INFRINGEMENT. The user assumes the entire risk as to the accuracy and
the use of this document. This document may be copied and distributed
subject to the following conditions:
1. All text must be copied without modification and all pages must be
included.
2. All copies must contain VERITAS Software Corporation's copyright
notice and any other notices provided therein.
3. This document may not be distributed for profit.

Sincerely,
VERITAS Software Corporation