[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Port 1433



On Sat, Aug 03, 2002, Dale Amon wrote:
> What would be interesting about Port 1433? I seem to be seeing hits
> on it on different, well seperated networks. Is it a destination for
> worms and virii?

The port 1433/tcp is the Microsoft SQL Server port.. an interesting port
if you are able to guess the "sa" password (usually null) since you are
then able to run shell commands with administrator rights. The recent
"Spida worm" exploited exactly this:

http://www.cert.org/incident_notes/IN-2002-04.html

-- 
MaXX



Reply to: