[Gllug] Net outages caused by worm possibly

[Simon A. Boggis]

On Sat, 2003-01-25 at 12:08, Robert Wood wrote:
> John,
> 
>      Ill comfirm its quite an issue, MS SQL worm

I've seen ~15k udp packets to port 1434 last night, but the logging is
rate limited. Here's some reference posted on bugtraq
(bugtraq at securityfocus.com):

> Some random screen shots, a copy of the worm as a perl script, and a
> disassembly (sorry, no comments) can be found online at:
> 
> http://www.digitaloffense.net/worms/mssql_udp_worm/

> vulnerabilites in:
>
> http://www.nextgenss.com/advisories/mssql-udp.txt

and 

>        http://www.kb.cert.org/vuls/id/370308
>        http://www.kb.cert.org/vuls/id/399260
>        http://www.kb.cert.org/vuls/id/484891

Simon

-- 
----------------------------------------------------------------------
Dr Simon A. Boggis                                  Systems Programmer
Department of Computer Science,                     Tel. 020 7882 7522
Queen Mary, University of London, London E1 4NS UK. 
---- GPG public key <http://www.dcs.qmul.ac.uk/~simon/#publickey> ----


-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug