[IP] Microsoft hit by SQL worm

[Dave Farber <dave@farber.net>]

------ Forwarded Message
From: Steve Bellovin <smb@research.att.com>
Date: Mon, 27 Jan 2003 22:46:12 -0500
To: dave@farber.net
Subject: Microsoft hit by SQL worm

Microsoft Was Vulnerable to Worm Virus
By THE ASSOCIATED PRESS

Filed at 9:48 p.m. ET

SEATTLE (AP) -- Microsoft Corp. itself was exposed to the virus-like
attack that crippled global Internet activity last weekend because
it failed to install crucial fixes to its own software on many
Microsoft computer servers.

Although Microsoft contends its failure to keep up with its own
updates did not cause major problems, security experts said it
points to a larger issue: Microsoft's process for keeping customers'
software secure is hugely flawed.

The virus-like attack, called ``slammer'' or ``sapphire,'' exploited
a known flaw in Microsoft's ``SQL Server 2000'' database software,
used by businesses, government agencies, universities and others
around the world. Microsoft had issued a patch for the flaw in
July, but many -- including some units within Microsoft -- had
failed to install it.


....


http://www.nytimes.com/aponline/technology/AP-Microsoft-Worm.html


------ End of Forwarded Message

-------------------------------------
To unsubscribe or update your address, click
  http://v2.listbox.com/member/?listname=ip

Archives at: http://www.interesting-people.org/archives/interesting-people/