Re: port 1433?

[jdc () MALIBUBOATS COM (JD Conley)]

Hey,

Port 1433 is used by MS SQL Server... There is a well known DoS attack for
MS SQL Server if port 1433 is open, and a specific security patch is not
applied.  I forget the specifics.  Check out this Security Bulletin on the
MS Site if you want more info:

http://www.microsoft.com/TechNet/security/bulletin/fq99-059.asp

Hope this helps!  =)

JD Conley
"Computer Nerd"
www.malibuboats.com

-----Original Message-----
From: Sir Scriptzalot [mailto:sir_scriptzalot () HOTMAIL COM]
Sent: Sunday, June 25, 2000 7:30 PM
To: INCIDENTS () SECURITYFOCUS COM
Subject: port 1433?

Dear all,

Can anyone interpret this "attack" or seen something
similar? What service runs on port 1433 and note the
almost +1 incremental nature of the ports on the remote host.

Thanks
Max

              remote host   rport   ourhost             dport
Jun 23 10:40|216.46.247.224|4135|dns-server.ourhost.com|1433
Jun 23 10:40|216.46.247.224|4134|dns-server.ourhost.com|1433
Jun 23 10:40|216.46.247.224|4135|dns-server.ourhost.com|1433
Jun 23 10:40|216.46.247.224|4134|dns-server.ourhost.com|1433
Jun 23 10:40|216.46.247.224|4138|dns-server.ourhost.com|1433
Jun 23 10:40|216.46.247.224|4135|dns-server.ourhost.com|1433
Jun 23 10:40|216.46.247.224|4138|dns-server.ourhost.com|1433
Jun 23 10:40|216.46.247.224|4139|dns-server.ourhost.com|1433
Jun 23 10:40|216.46.247.224|4139|dns-server.ourhost.com|1433
Jun 23 10:40|216.46.247.224|4138|dns-server.ourhost.com|1433
Jun 23 10:40|216.46.247.224|4140|dns-server.ourhost.com|1433
Jun 23 10:40|216.46.247.224|4139|dns-server.ourhost.com|1433
Jun 23 10:40|216.46.247.224|4140|dns-server.ourhost.com|1433

Max Steel
Omega-Xpress

________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com