When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works.

SQL worm: Blame laid squarely on Microsoft

Neowin · Jan 28, 2003 07:06 EST with 1 comment

Thanks xStainDx for this story.

The Internet Wide impact of routers being flooded with SQL attack messages can be laid directly at the feet of Microsoft.

The patch that would have prevented this problem (Microsoft Security Bulletin MS02-039, Q323875) is not only a manually applied patch, it is horribly obscure

The patch updates debug libraries that less than 1/100 or one per cent of the installations ever use. Most people do not even realize that SQL patches do not automatically install and thus think that if they use Windows update it will take care of them.

Wrong. This is why 99.9% of the machines were vulnerable despite having been warned in July.

Click Read More for the rest of the story!

News source: Inquirer