New "SQLsnake" Microsoft Worm

Zardon · May 22, 2002, 04:45 PM

A new worm, targeting the Microsoft SQL daemon, has been sweeping the net. It uses massive scanning, default passwords, exploits against vulnerable versions and even attempts to brute force passwords

microsoft bulletin http://www.microsoft.com/security/se...s02020_sql.asp
sans analysis http://www.incidents.org/diary/diary.php?id_6

Already over a thousand compromised systems- you're apparently only vulnerable if you run MS SQL, but the worm is causing a substantial spike in traffic to port 1433 on the net.

May 22, 2002, 04:45 PM	#1
Zardon DriverHeaven Founder Join Date: May 2002 Posts: 32,480 Rep Power: 177	New "SQLsnake" Microsoft Worm A new worm, targeting the Microsoft SQL daemon, has been sweeping the net. It uses massive scanning, default passwords, exploits against vulnerable versions and even attempts to brute force passwords microsoft bulletin http://www.microsoft.com/security/se...s02020_sql.asp sans analysis http://www.incidents.org/diary/diary.php?id_6 Already over a thousand compromised systems- you're apparently only vulnerable if you run MS SQL, but the worm is causing a substantial spike in traffic to port 1433 on the net.