New Microsoft SQL Server Worm

Ian Bell writes: "A new unnamed worm has been released and, once again, Microsoft software is the target. More specifically, this new worm targets Microsoft SQL servers with no administrator passwords set. Once the server is infected, it logs onto Internet Relay Chat (IRC) servers and is ready to receive commands and act accordingly. Although this can be a fairly malicious worm, it is very unlikely to infect many servers due to the fact that majority of Microsoft SQL servers have administrator passwords."

Comments

first post....

[Husaria]

well, not really..but..how come we only hear of ms worms..granted we had a linux article on filesystems, but where are the linux worms at?

Perhaps this will help mysql and postgresql

[djcdplaya]

the only reason Microshaft products are still widely used is due to the fact that they are generally easy to set up. Maybe this will show some admins that an easy set up will skip details (although I don't really consider a password to be a "detail") and that perhaps with a little effort on their part, a much superior product can be had for free (mysql and postgresql). Anyway, just my 2 cents.

Layoff the victims

[Anonymous Coward]

Whoever gets infected by this one should lose their job. I can understand not getting around to install the latest patch (granted, if you're a full-time admin who does little else this should never happen), but not even setting a simple, easy to remember and/or guess password? That's like parking your BMW on the street with the doors open and the keys in the ignition. It's just plain stupid.

Re:The Majority HAVE Passwords?

[Anonymous Coward]

The MAJORITY of your post was unsubstantiated bullshit. The words that weren't are: "default" "of" "company" and "huge". Good job!

I had an administrator password once..

[BEA6D]

but I forgot it.