This is not a new vulnerability, but there is a new worm/virus that is exploiting it. THe vulnerability is MS02-039.
http://www.microsoft.com/technet/tre...n/ms02-039.asp
http://www.cnn.com/2003/TECH/interne....ap/index.html
I'll try to post more info once it is available.
More , they are calling it SQLSlammer.
http://vil.nai.com/vil/content/v_99992.htm.
http://securityresponse.symantec.com...lexp.worm.html
Luckily I was all patched with the machines I manage. Some of my coworkers were not so lucky. Of course I did get a 4am wake up call to check everything out.
Blocking port 1434 on your firewall is the quick and easy fix, but you should really install the patch, because once it is inside your firewall, it will wreak havoc on your network.
