Advertisement
Promo

Security threats Toolkit

Microsoft releases anti-Slammer tools

Martin LaMonica CNET News

Published: 06 Feb 2003 16:02 GMT

  • Email
  • Trackback
  • Clip Link
  • Print friendly
  • Post Comment

Microsoft has released early versions of database security applications in reaction to the Slammer worm that wreaked havoc on the Internet last week.

The software tools, posted on Microsoft's Web site, give systems administrators a way to check the company's SQL Server 2000 database for the Slammer worm and to address vulnerabilities. The fixes focus on versions of the database that run on network servers and on another version, called SQL Server Desktop Engine, that runs on desktop PCs.

SQL Server Desktop Engine 2000 is used by Microsoft and third-party software developers as a database server embedded in other applications. Microsoft offers it as an alternative file store for Office XP applications and for its Visual Studio.Net programming application.

The Slammer virus, which struck on 25 January, exploited a flaw in the SQL Server database and caused an estimated $1bn in damage in the first five days as it rapidly spread around the globe.

Microsoft has made the utilities available now as first takes and plans to update them. The tools are a follow-on to the patches Microsoft made available before Slammer hit.

The three new tools are these:

* SQL Server 2000 SQL Scan Tool, which scans a network to identify instances of SQL Server 2000 and SQL Server Desktop Engine 2000 that may be vulnerable to Slammer. The utility inspects computers running the Windows 2000, Windows NT 4.0 or Windows XP operating systems. The tool itself runs on Windows 2000 or later versions.

* SQL Check, which scans an individual computer to see whether an instance of SQL Server 2000 or SQL Server Desktop Engine 2000 is vulnerable to the Slammer worm. On computers running Windows NT 4.0, Windows 2000 and Windows XP, the utility stops and disables the affected database services. On computers running Windows 98 and Windows ME, it merely identifies vulnerable spots.

* SQL Critical Update, which scans individual computers running both the server and desktop versions of SQL Server for the Slammer worm and updates the affected files.


For all security-related news, including updates on the latest viruses, hacking exploits and patches, check out ZDNet UK's Security News Section.

Let the editors know what you think in the Mailroom.

  • Email
  • Trackback
  • Clip Link
  • Print friendlyPrint with EPSON

Did you find this article useful?
31 out of 115 people found this useful


Full Talkback thread

0 comments

Company/Topic Alerts

Create a new alert from the list below:






Video icon

Video

Sentry Posts Blog

Civil liberties groups attack file-sha...

Civil liberties and digital rights organisations have strongly criticised Lord Mandelson's Digital Economy Bill. Liberty said in a position paper on Tuesday that the bill, part of... More

Post a comment

Authentication risks all too human

Risks to successful online banking identification and authentication using smartcards involve a mixture of human and technological factors, according to the European Network and Information... More

1 comment

Opera censors Chinese content

Opera has updated the Chinese version of its mobile browser to stop users accessing restricted content. Opera Mini was updated on Friday from an international to a Chinese version,... More

2 comments


Skip Sub Navigation Links to CNET Brand Links

Help

Become part of the ZDNet community.

Newsletters