New worm / port 1434?

Sat Jan 25 08:46:08 UTC 2003

1434 is the SQL Server Resolution Service.

Unfortunately, this appears to be a whole new thing, I was unable to find
anything more recent then May of 2002 about security issues with this port.

Thanks,

Adam Debus
Network Administrator, ReachONE Internet
adam at reachone.com

----- Original Message -----
From: "Mike Tancsa" <mike at sentex.net>
To: "Avleen Vig" <lists-nanog at silverwraith.com>
Cc: <nanog at nanog.org>
Sent: Friday, January 24, 2003 11:19 PM
Subject: Re: New worm / port 1434?

>
>
> Yes, I am seeing this big time.  Are you sure its SQL server ?  Thats
> normally 1433 no ?  Are there any other details somewhere about this ?
>
> At 10:32 PM 1/24/2003 -0800, Avleen Vig wrote:
>
> >It seems we have a new worm hitting Microsoft SQL server servers on port
> >1434.
>
> --------------------------------------------------------------------
> Mike Tancsa,                                    tel +1 519 651 3400
> Sentex Communications,       mike at sentex.net
> Providing Internet since 1994                    www.sentex.net
> Cambridge, Ontario Canada   www.sentex.net/mike
>
>