nanog mailing list archives
Re: New worm / port 1434?
From: Lloyd Taylor <ltaylor () keynote com>
Date: Fri, 24 Jan 2003 23:56:23 -0800 (PST)
This may well be the exploit being used: http://www.nextgenss.com/advisories/mssql-udp.txt --Lloyd On Sat, 25 Jan 2003, Dave Stewart wrote:
Date: Sat, 25 Jan 2003 01:50:03 -0500 From: Dave Stewart <dbs () dbscom com> To: nanog () merit edu Subject: Re: New worm / port 1434? At 01:32 AM 1/25/2003, you wrote:It seems we have a new worm hitting Microsoft SQL server servers on port 1434.Agreed... shutting down MSSQL stopped the flood here.... now to find it and remove it
Current thread:
- New worm / port 1434? Avleen Vig (Jan 24)
- Re: New worm / port 1434? Dave Stewart (Jan 24)
- Re: New worm / port 1434? Lloyd Taylor (Jan 25)
- Re: New worm / port 1434? Pete Ashdown (Jan 24)
- Re: New worm / port 1434? Gary Coates (Jan 25)
- Re: New worm / port 1434? Peter van Dijk (Jan 25)
- Re: New worm / port 1434? Dr. Mosh (Jan 25)
- Re: New worm / port 1434? Gary Coates (Jan 25)
- Re: New worm / port 1434? Josh Richards (Jan 25)
- Re: New worm / port 1434? Jake Khuon (Jan 25)
- Re: New worm / port 1434? Josh Richards (Jan 25)
- Re: New worm / port 1434? Mike Tancsa (Jan 25)
- Re: New worm / port 1434? Simon Lockhart (Jan 25)
- Re: New worm / port 1434? Curtis Maurand (Jan 25)
- Re: New worm / port 1434? Simon Lockhart (Jan 25)
(Thread continues...)
- Re: New worm / port 1434? Dave Stewart (Jan 24)