web designweb site design Online Store  web design My Account   About Us web design company Contact Us free web design Support web site design company1 800 695-6200
cobalt raq servers
low cost dedicated hostingdedicated web server
Wed Jan 07 2009
Network Traffic Probe
dedicated web hosting dedicated hosting dedicated server
WHAT'S NEW

 

MS SQL Server Worm Wreaking Havoc

 

Since about midnight EST almost every host on the internet has been receiving a 376 byte UDP payload on port ms-sql-m (1434) from a random infected server. Reports of some hosts receiving 10 per minute or more. internetpulse.net is reporting UUNet and Internap are being hit very hard.

This is the cause of major connectivity problems being experienced worldwide. It is believed this worm leverages a vulnerability published in June 2002.

Several core routers have taken to blocking port 1434 outright. If you run Microsoft SQL Server, make sure the public internet can't access it. If you manage a gateway, consider dropping UDP packets sent to port 1434.

This has effectively disabled 5 of the 13 root nameservers.

ISS assigns this situation the rating AlertCon 4 - Catastrophic threat.