main
Report a problem

Worm exposes laziness and Microsoft flaws

Keldyn   on 27 January 2003 - 08:17 · 15 comments & 2697 views

Advertisement (Why?)
Another related story....
This weekends attack should be seen as a serious wakeup call for system administrators who have been lax in patching their systems and should serve to increase awareness about the importance of system security. -Ed


In the largest such incident since the Code Red and Nimda worms swamped servers in 2001, the Sapphire worm--also known as Slammer and SQLExp--infected more than 120,000 computers and caused chaos within many corporate networks. Some Internet service providers in Asia were overwhelmed.

The small but malicious program rapidly exploited a six-month-old flaw in Microsoft SQL servers, underscoring a dirty secret in the IT industry: software bugs are common and administrators are slow to fix even widely publicized problems, said Johannes Ullrich, director of the security information site Incidents.org.

"Companies should have been ready for (the worm)," he said. "That patch should have been applied--it's six months old now."

View: Full Story - Worm exposes laziness and Microsoft flaws
News source: C|Net

Post a comment · Send to friend Comments · There are 15 additional comments
#1 vetBroChaos on 27 Jan 2003 - 18:35
umm, correct me if i'm wrong, but isn't apache the most widely used webserver, and that would mean mysql is more widely used the mssql. thus making this statement pointless... "And to you penguin-lovers reading; what would you say if suddenly there were actually enough linux boxes running on the Internet to be meaningful"

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)