SQL virus reports. 7AM Pacific. Heard a report on NPR that some kind of Internet-wide denial of service attack is underway. They quote Microsoft saying it's serious. If you have more information, esp Web pages I can point to, please post a comment on my Radio weblog. Thanks.
Reports: CNN, BBC, Slashdot, Beta News, Google.
Freedom.Org: "Quick fix is to firewall port 1434/UDP traffic, and reboot the affected SQL servers."
Slashdot: "If you run Microsoft SQL Server, make sure the public Internet can't access it."
Beta News: "The attack used a buffer overflow to execute code on a vulnerable SQL Server, causing that system to randomly seek out other computers to infect and in the process consume massive amounts of bandwidth."
Anne Bradstreet: "If we had no winter, the spring would not be so pleasant: if we did not sometimes taste of adversity, prosperity would not be so welcome." [Scripting News]
I just can't believe that there are systems administrators out there that don't firewall off everything. Especially things like database access. WAKE UP PEOPLE!
6:41:13 PM
|