W32/SQLSlammer worm

 Information about the W32/SQLSlammer worm:

W32/SQLSlammer worm is DDOS worm. This worm will infect Microsoft SQL Server 2000, which is not patched with SQL Server 2000 Service Pack 3.

This worm exploits the vulnerability of buffer overflow under SQL Server. The worm uses UDP port 1434 to achieve the same. The worm loads into the server's memory and replicates itself to other SQL servers using the same port. This generates unwanted traffic, which alters the server performance.

The worm does not write any file to the Server's hard drive. Rebooting the Server will remove the worm. To avoid further infection, server needs to be patched with SQL Server 2000 Service Pack 3.

This worm first appeared on 25th January 2003.

 Other names of W32/SQLSlammer worm:

This worm is also known as SQLSlammer, W32.SQLExp.Worm, Sapphire, DDOS_SQLP1434.A