NetProwler 3.5.1 Security Update 22

January 25, 2003
NetProwler 3.5.1 Security Update 22

Description

NetProwler 3.5.1 SU22 includes detection of the W32.SQLExp.Worm. Successful infection by this worm could result in the execution of arbitrary code on the machine. You may obtain NetProwler 3.5.1 SU22 through the product's auto update feature.

Security Update 22 Signature

W32_SQLEXP_Worm_Propagation

W32.SQLExp.Worm targets servers running Microsoft SQL. The worm sends 376 bytes to UDP port 1434 - the SQL Server Resolution Service Port. The worm exploits a vulnerability in Microsoft SQL Server 2000 that could make it possible for remote attackers to gain access to target hosts.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2002-0649
http://www.securityfocusonline.com/bid/5311

Last modified on: Saturday, 25-Jan-03 22:58:06