943,487 Members | Top Members by Rank

Web Development > Databases > MS SQL > Microsoft SQL Server 2000 Exploit!
Ad:
  • MS SQL Discussion Thread
  • Unsolved
  • Views: 10568
  • MS SQL RSS
Permalink
Jan 25th, 2003
0

Microsoft SQL Server 2000 Exploit!

Expand Post »
Well, if you haven't noticed already, some to most of the internet is down! This is due to an exploit in Microsoft SQL Server SP2 and lower.

A buffer overrun can allow hackers to run code on the SQL Server. This worm, infects an SQL Server and then that SQL Server infects others.

My reccomendation? APPLY SP3!

If you have been infected, these steps should be taken:

1. Stop and DISABLE the MSSql Service, and all related ones
2. Stop and DISABLE IIS (if running)
3. Apply the SP3 Support Pack
4. Restart
5. Start and ENABLE the core MSSql Server (Not the Transaction Coordinator, etc)
6. Change your SA password!
7. Start and ENABLE all other stopped services.
Moderator
Reputation Points: 322
Solved Threads: 28
The C# Man, Myth, Legend
Tekmaven is offline Offline
914 posts
since Feb 2002
Permalink
Jan 26th, 2003
0
Re: Microsoft SQL Server 2000 Exploit!
We noticed this Saturday morning at work. Something wrong with SQL Server 2000. We didn't think it was going to be that big. I was surprised how big it was when I saw it on the news and heard about it at CNET News.
Team Colleague
Reputation Points: 262
Solved Threads: 18
a.k.a inscissor
samaru is offline Offline
1,227 posts
since Feb 2002
Permalink
Jan 26th, 2003
0
Re: Microsoft SQL Server 2000 Exploit!
Here are instructions from Microsoft and where to download the files for SQL Server 2000 SP3:

http://www.microsoft.com/downloads/d...displaylang=en
Team Colleague
Reputation Points: 262
Solved Threads: 18
a.k.a inscissor
samaru is offline Offline
1,227 posts
since Feb 2002

This thread is more than three months old

No one has posted to this discussion for at least three months. Please let old threads die and do not reply to them unless you feel you have something new and valuable to contribute that absolutely must be added to make the discussion complete. Otherwise, please start a new thread in this forum instead.
Message:
Previous Thread in MS SQL Forum Timeline: SQL Server will embed .NET languages
Next Thread in MS SQL Forum Timeline: ASP and SQL ?





About Us | Contact Us | Advertise | Acceptable Use Policy
Forum Index | Build Custom RSS Feed


Follow us on Twitter


© 2011 DaniWeb® LLC