Microsoft WINS and SQL Server Targeted

Advanced Search

January 05, 2005 Microsoft WINS and SQL Server Targeted A Web Exclusive from WinInfo Mark Joseph Edwards WinInfo InstantDoc #45015 WinInfo	Email this Article Printer Friendly Reader Comments Digg This Del.icio.us RSS
Subscribe to Windows IT Pro \| See More Hotfixes Articles Here \| Reprints \| Or get the Monthly Online Pass—only $5.95 a month!

The Internet Storm Center (ISC) reports that attempts to penetrate systems through WINS and SQL Server have been detected. According to "Handler's Diary" entries during the last week, the ISC has received reports of increased probes directed at TCP port 42 which is used by WINS. A chart provided by Research and Education Networking Information and Analysis Center (REN-ISAC) shows a significant increase in traffic destined for port 42 over the past several days.

In mid-December Microsoft issued patch MS04-045 to protect WINS and undoubtedly some administrators have not yet installed the patch. If you're among those who haven't then now would be a good time to do so. In addition to installing the patch administrators can ensure that WINS is not exposed to outside networks by blocking access to TCP port 42.

ISC has also received reports of brute force attempts against SQL Server passwords. Administrators should consider checking their SQL Servers to make sure none are exposed to the Internet unless they absolutely must be.

ISC said they believe that the tool SQLck.exe is being used in the password cracking attempts and requests that anybody who finds the program on their servers contact ISC to provide them with a copy of the executable file for analysis.

End of Article

Reader Comments

You must log on before posting a comment.

If you don't have a username & password, please register now.

Top Viewed ArticlesView all articles

WinInfo Short Takes: Week of November 24, 2008

An often irreverent look at some of the week's other news, including a Vista Capable dismissal request, Zune price reductions, Morrow musings, Novell and Microsoft sitting in a tree ... two years later, Yahoo!, IE 6 on Windows Mobile, and so much more ...

Command Prompt Tricks

One reader shares his tip for setting up the command prompt to reflect a remote path. ...

PsExec

This freeware utility lets you execute processes on a remote system and redirect output to the local system. ...

Security Whitepapers The Impact of Messaging and Web Threats

Why SaaS is the Right Solution for Log Management

Protecting (You and) Your Data with Exchange Server 2007

Related Events Microsoft BI Unleashed | Online Conference

SQL Server 2008 – Can You Wait? | Philadelphia

Check out our list of Free Email Newsletters!

Security eBooks Spam Fighting and Email Security for the 21st Century

Understanding and Leveraging Code Signing Technologies

A Guide to Windows Certification and Public Keys

Related Security Resources Become a VIP member of the Windows IT Pro community!
Get it all with the VIP CD and VIP access. A $500+ value for only $279!

Subscribe to Windows IT Pro!
Solve your toughest technical problems with our experts and access 10,000 + articles online. 30% off

Monthly Online Pass - Only $5.95!
Get instant access to 10,000+ articles from Windows IT Pro Magazine!

TechNet Virtual Labs
Evaluate and test Microsoft's newest products.

ADS BY GOOGLE

Job Openings in IT		SPONSORED LINKS		FEATURED LINKS
		Is Your Approach to VMware Server Recovery Outdated? Is your data protected from server failure? Download this white paper to find the best way to back up, recover, and restore your VMware ESX Server 3.x. Maximize speed, performance and reliablity of your PCs and servers—automatically! Speed Up Your PC! Try Diskeeper 2008 with InvisiTasking Free Now! GoGrid Offers FREE Trial for Windows Cloud Servers Deploy Windows Server 2003 and 2008 with free load balancing through GoGrid’s award winning web-based GUI – all in less than 5 minutes Order Your SQL Fundamentals CD Today! Learn how to use SQL Server, understand Office integration techniques and dive into the essentials of SQL Express and Visual Basic with this free SQL Fundamentals CD.		You've Deployed SharePoint...Now What? This one-day free online conference delivers the technical knowledge needed to kick MOSS up a notch. In one information-packed day, independent SharePoint experts will present practical, real-world information and provide take-away, ready-to-use solutions Ease Your Scripting Pains with the Flexibility of PowerShell! Paul Robichaux equips you with PowerShell basics in 3 introductory lessons, each followed by live Q&A—all on your own computer! Register today! What Would You Do If You Ran Microsoft? ITTV's 2008 inaugural video contest, "If I Ran Microsoft..." is your chance to tell it like it is. Be goofy or be serious, but don"t miss this chance to have fun, win prizes, and go viral in a major way. Maximize Your SharePoint Investment This web seminar discusses how true bi-directional replication of SharePoint content from one server to another enables branch offices to maintain access to current SharePoint content. Rock Your Knowledge, and Compete with Friends and Colleagues! Are you the Web Application Performance Guru in your office? It's time to have fun! Download now to access the crossword puzzle. Challenge yourself and complete this fun activity!

Windows IT Pro Home

FAQ for Windows

WinInfo News
Europe Edition

About Us

Contact Us/Customer Service

Media Kit

Affiliates / Licensing

SQL Server Magazine

Office & SharePoint Pro

Windows Dev Pro

IT Job Hound

ITTV
IT Library

Technology Resource Directory

Windows Excavator

Windows SuperSite

Windows IT Pro is a Division of Penton Media Inc.
Copyright © 2008 Penton Media, Inc., All rights reserved. Terms and Use | Privacy Statement | Reprints and Licensing