[unisog] udp port 1434 worm?

Gene Rackow rackow at mcs.anl.gov
Sat Jan 25 14:55:50 GMT 2003

It appears to be a MS-SQL attack.  See


Or see the MS security announcement and fix at

This is an old problem that people should have fixed some time ago.
Numda, CodeRed, now MSSQL-Hell.

Rich Graves made the following keystrokes:
 >anyone isolated it yet? we've yanked a half dozen machines in the last 2
 >hours. all seem to be windoze, possibly related to ms-sql server.
 >given the unusual lag we're seeing on internet2 i'm assuming this is a
 >shared experience.
 >Rich Graves <rcgraves at brandeis.edu>
 >UNet Systems Administrator

More information about the unisog mailing list