Skip to Content.
Sympa Menu

freetds - [freetds] MS-SQL Slammer Worm

freetds AT lists.ibiblio.org

Subject: FreeTDS Development Group

List archive

Chronological Thread  
  • From: 이중훈 <wanja AT inzen.com>
  • To: <freetds AT lists.ibiblio.org>
  • Subject: [freetds] MS-SQL Slammer Worm
  • Date: Mon, 27 Jan 2003 11:53:59 +0900

The infamous Slammer worm.
Although it isn't actually a TDS attack,
it is related to the MS SQL Server(UDP Port 1434).

I know that it's a buffer overflow attack, starting with byte 0x04 or 0x08
or 0x0a.
I understand that it fakes the packet source as a DNS Server, resulting in
massive reply packets sent to DNS Servers and crashing them. (Is that
right?)

Does anyone here have extra information? An exploit?






Archive powered by MHonArc 2.6.24.

Top of Page