By the way, I know you guys probably don't care but McAfee is saying that if you have SP3 on your windows2000 server you will not be infected with SQLSlammer, this is absolutely NOT true, I have a box with sp3 and it IS infected. -Drew
On Sat, Jan 25, 2003 at 02:21:21PM -0500, Drew Weaver wrote:
By the way, I know you guys probably don't care but McAfee is saying that if you have SP3 on your windows2000 server you will not be infected with SQLSlammer, this is absolutely NOT true, I have a box with sp3 and it IS infected.
They probably meant MS SQL Service Pack 3.
On Sat Jan 25, 2003 at 02:21:21PM -0500, Drew Weaver wrote:
By the way, I know you guys probably don't care but McAfee is saying that if you have SP3 on your windows2000 server you will not be infected with SQLSlammer, this is absolutely NOT true, I have a box with sp3 and it IS infected.
I think you'll find it's SP3 for SQLServer you need, not SP3 for Win2k. Simon -- Simon Lockhart | Tel: +44 (0)1628 407720 (BBC ext 37720) Technology Manager | Fax: +44 (0)1628 407701 (BBC ext 37701) BBC Internet Services | Email: Simon.Lockhart@bbc.co.uk BBC Technology, Maiden House, Vanwall Road, Maidenhead. SL6 4UB. UK
Drew, There *IS* a difference between windows SP3 and Microsoft SQL2000 SP3.. you do know that right? -Scotty
By the way, I know you guys probably don't care but McAfee is saying that if you have SP3 on your windows2000 server you will not be infected with SQLSlammer, this is absolutely NOT true, I have a box with sp3 and it IS infected.
-Drew
On Sat, 25 Jan 2003, Drew Weaver wrote:
By the way, I know you guys probably don't care but McAfee is saying that if you have SP3 on your windows2000 server you will not be infected with SQLSlammer, this is absolutely NOT true, I have a box with sp3 and it IS infected.
SP3 for W2K or SP3 for SQL Server? They are two different things... C
-Drew
Are you referring to Windows 2000 Service Pack 3 or MSSQL Service Pack 3? If MSSQL Service Pack 3, approximately when would you guesstimate the patch was installed? Andrew -----Original Message----- From: owner-nanog@merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of Drew Weaver Sent: Saturday, January 25, 2003 2:21 PM To: 'nanog@merit.edu' Subject: W32.SqlSlammer By the way, I know you guys probably don't care but McAfee is saying that if you have SP3 on your windows2000 server you will not be infected with SQLSlammer, this is absolutely NOT true, I have a box with sp3 and it IS infected. -Drew
MSSQL SP 3 On Sat, 25 Jan 2003, andrew2@one.net wrote:
Are you referring to Windows 2000 Service Pack 3 or MSSQL Service Pack 3? If MSSQL Service Pack 3, approximately when would you guesstimate the patch was installed?
Andrew
-----Original Message----- From: owner-nanog@merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of Drew Weaver Sent: Saturday, January 25, 2003 2:21 PM To: 'nanog@merit.edu' Subject: W32.SqlSlammer
By the way, I know you guys probably don't care but McAfee is saying that if you have SP3 on your windows2000 server you will not be infected with SQLSlammer, this is absolutely NOT true, I have a box with sp3 and it IS infected.
-Drew
-- Alex Rubenstein, AR97, K2AHR, alex@nac.net, latency, Al Reuben -- -- Net Access Corporation, 800-NET-ME-36, http://www.nac.net --
At 02:21 PM 1/25/2003, you wrote:
By the way, I know you guys probably don't care but McAfee is saying that if you have SP3 on your windows2000 server you will not be infected with SQLSlammer, this is absolutely NOT true, I have a box with sp3 and it IS infected.
To clarify, we're talking about Microsoft SQL Server 2000, Service Pack 3, not the Windows 2000 Service Pack 3 (which also exists). Two completely different animals I've got one machine with SQL 2K on it, and it, too, was infected. Then I installed SQL Server 2000 SP3, and put it back on the net. Just to be sure, I opened up port 1434 to it, and sat back and watched. Lotta traffic to port 1434, but nothing happened. It got hit several times, and never joined the crowd spewing traffic. If you have an infected machine, pull it off the 'net... immediately, if not sooner. Then go download the service pack for the SQL Server at: http://www.microsoft.com/downloads/details.aspx?FamilyId=9032F608-160A-4537-A2B6-4CB265B80766&displaylang=en Getting the 44 meg file over to the disconnected server is left as an exercise for the reader (remember SneakerNet?)
participants (8)
-
Alex Rubenstein -
andrew2＠one.net -
Avleen Vig -
Charles Sprickman -
Dave Stewart -
Drew Weaver -
K. Scott Bethke -
Simon Lockhart