full-disclosure - RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20030126031108.C49CBA@proven.weird.com>
From: woods at weird.com (Greg A. Woods)
Subject: RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!

[ On Saturday, January 25, 2003 at 18:11:12 (-0500), Richard M. Smith wrote: ]
> Subject: RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!
>
> However, this worm might not be so harmless as it appears because of
> collateral damage:
> 
>    Bank of America ATMs Disrupted by Virus
>  
> http://story.news.yahoo.com/news?tmpl=story&ncid=578&e=3&cid=569&u=/nm/2
> 0030125/tc_nm/tech_virus_dc
> 
>    "SEATTLE (Reuters) - Bank of America Corp. said on 
>    Saturday that customers at a majority of its 13,000 
>    automatic teller machines were unable to process 
>    customer transactions after a malicious computer worm 
>    nearly froze Internet traffic worldwide."

I'm wondering more if maybe BofA had a bunch of their own unpatched and
un-firewalled M$-SQL servers sitting around like lame ducks waiting to
be picked off.....

Of course even if they were patched they'd be pretty much off the air if
they weren't running through a (V)PN by the time ISPs got around to
blocking their access....

-- 
								Greg A. Woods

+1 416 218-0098;            <g.a.woods@...e.org>;           <woods@...ohack.ca>
Planix, Inc. <woods@...nix.com>; VE3TCP; Secrets of the Weird <woods@...rd.com>