[unisog] udp port 1434 worm?
rackow at mcs.anl.gov
Sat Jan 25 14:55:50 GMT 2003
It appears to be a MS-SQL attack. See
Or see the MS security announcement and fix at
This is an old problem that people should have fixed some time ago.
Numda, CodeRed, now MSSQL-Hell.
Rich Graves made the following keystrokes:
>anyone isolated it yet? we've yanked a half dozen machines in the last 2
>hours. all seem to be windoze, possibly related to ms-sql server.
>given the unusual lag we're seeing on internet2 i'm assuming this is a
>Rich Graves <rcgraves at brandeis.edu>
>UNet Systems Administrator
More information about the unisog