Worm squirming through SQL servers

By Bill Graziano on 21 May 2002 | Tags: Hot Fixes

A new worm that targets Microsoft SQL servers has begun squirming through the Internet, experts said Tuesday. Called DoubleTap by vulnerability analysis firm SecurityFocus, the worm has already managed to infect 1,600 servers, said Elias Levy, chief technology officer for the San Mateo, Calif., company. Even though SecurityFocus is currently tracking almost 100 infections per hour, the worm's only way to infect a system is if the Microsoft SQL server's system administrator password is left blank, the default. If for some reason you have a blank sa password on a public SQL Server, please change it. Thanks for the link Justin. Updated (5/28/2002): You can download a scanner to check your systems.

Link: Worm squirming through SQL servers