Search This Blog

Friday, January 8, 2010

SQL Slammer - re-visited

well, SQL slammer is pretty much still alive on the internet. one guy configured a small biz customer's router and set the dmz host to be the local apps server. that Apps server runs a sql 2000 version of MSDE. 

they started to have network problems, the server started to freeze, and the internet DSL router led flashes like hell.

this baffled me a couple of times as I reckon this is very old worm. But the bitter lession is "Don't assume anything".

Never expose MSDE 2000 to the internet. within hours, internet worms will find it, spam it and trash it.

No comments:

Post a Comment