| | |
Microsoft SQL Server 2000 Exploit!
Please support our MS SQL advertiser: Intel Parallel Studio Home
![]() |
Well, if you haven't noticed already, some to most of the internet is down! This is due to an exploit in Microsoft SQL Server SP2 and lower.
A buffer overrun can allow hackers to run code on the SQL Server. This worm, infects an SQL Server and then that SQL Server infects others.
My reccomendation? APPLY SP3!
If you have been infected, these steps should be taken:
1. Stop and DISABLE the MSSql Service, and all related ones
2. Stop and DISABLE IIS (if running)
3. Apply the SP3 Support Pack
4. Restart
5. Start and ENABLE the core MSSql Server (Not the Transaction Coordinator, etc)
6. Change your SA password!
7. Start and ENABLE all other stopped services.
A buffer overrun can allow hackers to run code on the SQL Server. This worm, infects an SQL Server and then that SQL Server infects others.
My reccomendation? APPLY SP3!
If you have been infected, these steps should be taken:
1. Stop and DISABLE the MSSql Service, and all related ones
2. Stop and DISABLE IIS (if running)
3. Apply the SP3 Support Pack
4. Restart
5. Start and ENABLE the core MSSql Server (Not the Transaction Coordinator, etc)
6. Change your SA password!
7. Start and ENABLE all other stopped services.
-Ryan Hoffman
.NET Specialist / Webmaster, Extended64.com.
Please do not email or PM me with support questions. Please direct them to the forums instead.
.NET Specialist / Webmaster, Extended64.com.
Please do not email or PM me with support questions. Please direct them to the forums instead.
0
#3 Jan 26th, 2003
Here are instructions from Microsoft and where to download the files for SQL Server 2000 SP3:
http://www.microsoft.com/downloads/d...displaylang=en
http://www.microsoft.com/downloads/d...displaylang=en
![]() |
Similar Threads
- asp.net profiles on sql server 2000 (ASP.NET)
- News Story: Which SQL Server 2008 edition is right for you? (MS SQL)
- How do I Backup the MS SQL server 2000 database file (mdf) to my local PC ? (MS SQL)
- Developing SQL Server 2000 (MS SQL)
- SQL Server 2000 Help (MS SQL)
- I want a platform in SQL server 2000 (MS SQL)
- SQL Server DBA (Software Development Job Offers)
- SQL SERVER 2000 Login failure in ASP.NET (ASP.NET)
Other Threads in the MS SQL Forum
- Previous Thread: SQL Server will embed .NET languages
- Next Thread: ASP and SQL ?
| Thread Tools | Search this Thread |






