Broadband Tech > Security > Security > 10 Years After SQL Slammer

10 Years After SQL Slammer

quote:

---

On Jan. 25, 2003, a new worm took the Internet by storm, infecting thousands of servers running Microsoft's SQL Server software every minute. The worm, which became known as SQL Slammer, eventually became the fastest-spreading worm ever and helped change the way Microsoft approached security and reshaped the way many researchers handled advisories and exploit code.

---

Looks like the old thread is still available, too:
»New Worm - UDP 1434 - SQL Server Monitor??

reply to Stem Bolt
That was quite the night. I remember my first 1434 hit came from a site in Poland which was notorious for infections which really tipped off something was up. I had done a presentation couple of months before for a number of 3 letter agencies and military organizations about issues around UDP port 1434, but up till then it appeared to be a non-issue. I remember grabbing a capture of the traffic, having a quick look and then getting on the phone to call up various response groups but by then it was to late, as this worm was nothing short of incredible and whoever wrote it really did think of pretty much everything, except I'm betting even they were surprised at how fast it spread. As a coder I'd have to tip my hat to the author of SQL Slammer, as nothing since has compared to its simple elegance and speed of propagation and I'd be almost willing to bet had the same author as main Code Red author.

Blake
--
Vendor: Author of Link Logger which is a traffic analysis and firewall logging tool

reply to Stem Bolt
Slammer was a wannabe

I remember the Stoned virus. There's even a thread about it although it'd been around long (about 10 years) before that.

Can't get rid of Stoned.D.2
--
Don't feed trolls--it only makes them grow!

reply to Stem Bolt
What time UTC did this thread get started at?

»New Worm - UDP 1434 - SQL Server Monitor??

Blake

reply to Link Logger
Agreed Link Logger. I remember that day well, my firewalls at work (my old job) got hammered by that thing. That was the day I was thankful for having a good backup plan in place.

reply to Stem Bolt
See also:
• »it.slashdot.org/story/13/01/25/1···-slammer
• »en.wikipedia.org/wiki/Slammer_%2···_worm%29

--
Canadians reserve the Right to - Arm Bears