Re: SQL server

From: Hari (hari_prasad_k_at_hotmail.com)
Date: 03/27/04


Date: Sat, 27 Mar 2004 13:14:34 +0530

Hi,

I feel that your SQL server is affected with Slammer Worm. This worm is
rapidly spreading computer worm infects networks and bogs
down Internet traffic across the globe.

Did you apply the SP3 for SQL Server, otherwise please apply it ASAP.

Information from MS.

"For database servers in production environments, Microsoft strongly
recommends testing and deploying
 Microsoft® SQL ServerT 2000 Service Pack 2 (SP2) and SQL Server 2000
Security Tools, which
contains update MS02-061. This configuration will help protect your system
against reinfection by the Slammer worm.

Microsoft also encourages all customers to fully test SQL Server 2000
Service Pack 3 (SP3) and then deploy it onto production systems as soon as
possible to ensure the most up-to-date protection. PLease look into the
below web site for finding and solving the worm.

http://www.microsoft.com/security/slammer.asp

Thanks
Hari
MCDBA

"Moiz" <moiz@abac.co.uk> wrote in message
news:OS##9u8EEHA.2740@TK2MSFTNGP11.phx.gbl...
> we have a strange problem.
>
> we connect to the Internet using an ADSL Router and our server has as
static
> IP address.
>
> with SQL server services running, SQL creates a lot of network traffic and
> the router fails.
> I have to then restart the server & router making sure that SQL services
do
> not start automatically, and then all is fine.
>
> we spent almost a month identifying that the cause of the problem was SQL,
>
> Help!
>
> Moiz
> moiz@abac.co.uk
> ============
>
>



Relevant Pages

  • Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!
    ... And there's no SP3 for MSDE, ... Make sure SQL Server is not running while you copy over the files ... If anyone writes a worm for the Hello bug, I hereby pre-name it the "Yo ... > A worm which exploits a vulnerability in SQL Server is bringing ...
    (Bugtraq)
  • Re: URGENT: New SQL Worm?
    ... MS02-039 patches the vulnerability this new worm is attacking. ... Blocking inbound access to UDP1434, the SQL Server 2000 Resolution ... Service port. ... Russ - Surgeon General of TruSecure Corporation/NTBugtraq Editor ...
    (NT-Bugtraq)
  • Re: Massive SQL Server attack
    ... MS02-039 patches the vulnerability this new worm is attacking. ... Blocking inbound access to UDP1434, the SQL Server 2000 Resolution ... Service port. ...
    (microsoft.public.win2000.security)
  • URGENT: New SQL Worm?
    ... installations were compromised by some sort of SQL Server Worm. ... Installation of the SP3 after compromise seemed to resolve ... system outside of SQL Server, and whether trojans have been installed. ...
    (NT-Bugtraq)
  • RE: Does Slammer effect my VPN?
    ... the "Slammer" worm is an Internet worm ... and begin evaluation and deployment of SQL Server 2000 SP3 or MSDE ... Check to see if there is a real network problem or if you have any ...
    (microsoft.public.sqlserver.security)