[Dshield] RE: (Dshield) port 1433

Toney, Mark mtoney at sodexhoUSA.com
Tue May 21 13:21:00 GMT 2002


     All: TrendMicro has issued a security alert regarding MSSQL port 1433 
     scans. It reads, in part:
     
     "Trend Micro has discovered huge number of connection attempts on port 
     1433 (MSSQL Port).
     
     The connection attempts look like a hacking attack, at first a MSSQL 
     handshake is transferred, which is not unusual. But afterwards, a
second 
     packet is sent, and this packet is an attempt to 
     login to the MSSQL server, using the account name 
     "sa" and an empty password. This is the default 
     authentication setup for MSSQL installation!"
     
     
     ______________________________ Reply Separator 
     _________________________________
     Subject: (Dshield) port 1433
     Author:  "Johannes Ullrich" <SMTP:jullrich at sans.org> at BUFFALO
     Date:    5/20/2002 9:58 PM
     
     
     Just a quick heads up to the list that I think something is 
     brewing with port 1433 (mssql). More later...
     
     --
     --------------------------------------------------------------- 
     jullrich at sans.org             Collaborative Intrusion Detection 
     join http://www.dshield.org
     
_______________________________________________ 
Dshield mailing list
Dshield at dshield.org
To change your subscription options (or unsubscribe), see: 
http://www.dshield.org/mailman/listinfo/list




More information about the list mailing list