User Name Password Register
DaniWeb IT Discussion Community
All
What is DaniWeb IT Discussion Community?
You're currently browsing the MS SQL section within the Web Development category of DaniWeb, a massive community of 373,916 software developers, web developers, Internet marketers, and tech gurus who are all enthusiastic about making contacts, networking, and learning from each other. In fact, there are 3,575 IT professionals currently interacting right now! Registration is free, only takes a minute and lets you enjoy all of the interactive features of the site.
Please support our MS SQL advertiser:
Views: 7850 | Replies: 2
Reply
Join Date: Feb 2002
Location: New York
Posts: 862
Reputation: Tekmaven is a glorious beacon of light Tekmaven is a glorious beacon of light Tekmaven is a glorious beacon of light Tekmaven is a glorious beacon of light Tekmaven is a glorious beacon of light 
Rep Power: 12
Solved Threads: 16
Moderator
Tekmaven's Avatar
Tekmaven Tekmaven is offline Offline
The C# Man, Myth, Legend

Microsoft SQL Server 2000 Exploit!

  #1  
Jan 25th, 2003
Well, if you haven't noticed already, some to most of the internet is down! This is due to an exploit in Microsoft SQL Server SP2 and lower.

A buffer overrun can allow hackers to run code on the SQL Server. This worm, infects an SQL Server and then that SQL Server infects others.

My reccomendation? APPLY SP3!

If you have been infected, these steps should be taken:

1. Stop and DISABLE the MSSql Service, and all related ones
2. Stop and DISABLE IIS (if running)
3. Apply the SP3 Support Pack
4. Restart
5. Start and ENABLE the core MSSql Server (Not the Transaction Coordinator, etc)
6. Change your SA password!
7. Start and ENABLE all other stopped services.
-Ryan Hoffman

ASP.NET Specialist / Webmaster, Extended64.com.
Please do not email or PM me with support questions. Please direct them to the forums instead.
AddThis Social Bookmark Button
Reply With Quote  
Join Date: Feb 2002
Location: Long Island, NY
Posts: 1,134
Reputation: samaru is just really nice samaru is just really nice samaru is just really nice samaru is just really nice 
Rep Power: 12
Solved Threads: 2
Colleague
samaru's Avatar
samaru samaru is offline Offline
a.k.a inscissor
  #2  
Jan 26th, 2003
We noticed this Saturday morning at work. Something wrong with SQL Server 2000. We didn't think it was going to be that big. I was surprised how big it was when I saw it on the news and heard about it at CNET News.
Reply With Quote  
Join Date: Feb 2002
Location: Long Island, NY
Posts: 1,134
Reputation: samaru is just really nice samaru is just really nice samaru is just really nice samaru is just really nice 
Rep Power: 12
Solved Threads: 2
Colleague
samaru's Avatar
samaru samaru is offline Offline
a.k.a inscissor
  #3  
Jan 26th, 2003
Here are instructions from Microsoft and where to download the files for SQL Server 2000 SP3:

http://www.microsoft.com/downloads/d...displaylang=en
Reply With Quote  
Reply

Only community members can participate in forum threads. You must register or log in to contribute.

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

 

DaniWeb MS SQL Marketplace
Thread Tools Display Modes

Similar Threads
Other Threads in the MS SQL Forum

All times are GMT -4. The time now is 5:22 pm.
Forum system based on vBulletin Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
©2003 - 2008 DaniWeb® LLC