New worm / port 1434?

Sat Jan 25 08:34:26 UTC 2003

We were hit hard by this as well. It appears to be a buffer overflow
exploit, as blocking the ports on my router and restarting MS SQL put a stop
to it.

Thanks,

Adam Debus
Network Administrator, ReachONE Internet
adam at reachone.com

----- Original Message -----
From: "Avleen Vig" <lists-nanog at silverwraith.com>
To: <nanog at nanog.org>
Sent: Friday, January 24, 2003 10:32 PM
Subject: New worm / port 1434?

>
> It seems we have a new worm hitting Microsoft SQL server servers on port
> 1434.
>