Saturday, 25. January 2003

Topic: - on January 25, 2003 at 12:55:31 PM CET

Running a ms-sql-server? Switch it off NOW!

I'm getting massive packet loss to various points on the globe. I am seeing a lot of these in my tcpdump output on each host.

02:06:31.017088 150.140.142.17.3047 > 24.193.37.212.ms-sql-m: udp 376 02:06:31.017244 24.193.37.212 > 150.140.142.17: icmp: 24.193.37.212 udp port ms-sql-m unreachable [tos 0xc0

It looks like there's a worm affecting MS SQL Server which is pingflooding addresses at some random sequence.

¬> securityfocus

... Comment