Top Mud Sites Forum Return to TopMudSites.com
Go Back   Top Mud Sites Forum > MUD Players and General Discussion > Tavern of the Blue Hand
Click here to Register

Reply
 
Thread Tools
Old 01-25-2003, 12:33 PM   #1
Threshold
Legend
 
Threshold's Avatar
 
Join Date: Apr 2002
Home MUD: Threshold RPG
Posts: 1,241
Threshold will become famous soon enough
Slashdot Article

Quote:
Originally Posted by
Since about midnight EST (1/25/03) almost every host on the internet has been receiving a 376 byte UDP payload on port ms-sql-m (1434) from a random infected server. Reports of some hosts receiving 10 per minute or more. internetpulse.net is reporting UUNet and Internap are being hit very hard. This is the cause of major connectivity problems being experienced worldwide. It is believed this worm leverages a vulnerability published in June 2002. Several core routers have taken to blocking port 1434 outright. If you run Microsoft SQL Server, make sure the public internet can't access it. If you manage a gateway, consider dropping UDP packets sent to port 1434.

This has effectively disabled 5 of the 13 root nameservers.

Additional links and information:

The MSFT SQL vulnerability

Quote:
Originally Posted by
Microsoft's database server SQL Server 2000 exhibits two buffer overrun
vulnerabilities that can be exploited by a remote attacker without ever
having to authenticate to the server. What further exacerbates these issues
is that the attack is channeled over UDP. Whether the SQL Server process
runs in the security context of a domain user or the local SYSTEM account,
successful exploitation of these security holes will mean a total compromise
of the target server and its data.
And:

More on the DDoS Attack

Quote:
Originally Posted by
We are monitoring massive Distributed Denial of Service attacks all over the U.S. tonight starting at around 11:30 PM CST. As many as 5 of the 13 root nameserver have been down, up to 10 with massive packet loss (xx%):
Yuck. MSFT's crappy, insecure code strikes again.
Threshold is offline   Reply With Quote
Old 01-25-2003, 01:00 PM   #2
Ingham
 
Posts: n/a
A direct copy-paste from slashdot.

Woo.
  Reply With Quote
Old 01-25-2003, 01:36 PM   #3
Threshold
Legend
 
Threshold's Avatar
 
Join Date: Apr 2002
Home MUD: Threshold RPG
Posts: 1,241
Threshold will become famous soon enough
Quote:
Originally Posted by
Ingham wrote:

A direct copy-paste from slashdot.

Woo.
Um..... The first paragraph was, as was noted by the "Slashdot article" link.

The rest of the information was quoted from other sites.

Do you have a good reason for being insulting when I was sharing information of value to mudders?

A lot of people's net access was affected by this, and I imainge some people might have been wondering why their favorite mud seems to have disappeared (with 5 of 13 nameservers down) or perhaps wondering why their connectivity was poor (since UUnet is the largest backbone provider in the US).
Threshold is offline   Reply With Quote
Old 01-25-2003, 01:58 PM   #4
Dulan
Senior Member
 
Join Date: Apr 2002
Posts: 354
Dulan is on a distinguished road
Send a message via ICQ to Dulan
As an aside - this inormation is actually not valuable to MUDders, Threshold.

It is, at best, of indirect value to most people on this board, of which I believe the majority of mudders could hardly give a fsck about.

(It is of direct value to me, I must admit. But, I don't want reposted slashdot articles on these boards. And let's not even get into the issues of plagarism, even with quoted stuff. Slashdot got into trouble with it themselves )

-D
Dulan is offline   Reply With Quote
Old 01-25-2003, 04:05 PM   #5
Bastien
New Member
 
Join Date: Aug 2002
Posts: 22
Bastien is on a distinguished road
I appreciated it, myself, Thresh. Rock on, thanks for caring, all that.

On a related note, Could God make a Santa hat so big that he himself could not wear it?
Bastien is offline   Reply With Quote
Old 01-25-2003, 04:14 PM   #6
Valg
Moderator
 
Valg's Avatar
 
Join Date: Apr 2002
Home MUD: Carrion Fields
Posts: 643
Valg will become famous soon enough
I cannot understand the appeal of hanging around waiting to flame someone who posts a heads-up with useful information. I had periodic disconnects last night, and the above information lets me know that I don't need to contact my ISP about problems- it's big enough that they're aware. MUDders tend to be online a good bit, and (depending on your style of MUD) small bursts of lag/disconnect can severely impact your ability to play.

If the information isn't useful to you, personally, feel free to move along and read the next post.
Valg is offline   Reply With Quote
Old 01-25-2003, 04:47 PM   #7
Orion Elder
Senior Member
 
Join Date: Apr 2002
Posts: 346
Orion Elder is on a distinguished road
Quote:
Originally Posted by (Ingham @ Jan. 25 2003,12:00)
A direct copy-paste from slashdot.

Woo.
I'm still not quite sure how that was 'insulting.' ####, he may have liked that it was posted from Slashdot... and was patting you on the back.
Orion Elder is offline   Reply With Quote
Old 01-25-2003, 04:56 PM   #8
Azhon
Member
 
Join Date: Apr 2002
Posts: 50
Azhon is on a distinguished road
<posted in wrong thing, sorry>
Azhon is offline   Reply With Quote
Old 01-25-2003, 06:24 PM   #9
Ingham
 
Posts: n/a
Quote:
Originally Posted by (Orion Elder @ Jan. 25 2003,15:47)
I'm still not quite sure how that was 'insulting.' ####, he may have liked that it was posted from Slashdot... and was patting you on the back.
I'm an avid slashdot reader myself, hence why I knew the article was from there...

Ah well, port 1434 shouldn't be open in the first place...
  Reply With Quote
Old 01-25-2003, 06:35 PM   #10
Samson
Member
 
Samson's Avatar
 
Join Date: Apr 2002
Location: United Socialist States of America
Home MUD: SmaugMuds.org
Home MUD: Arthmoor MUD Hosting
Posts: 249
Samson is on a distinguished road
Sheesh. Some people. I know I was certainly doing some head scratching last night when everything just stopped working for no reason. Was only able to access things on my ISP, and so I emailed them. Now at least I know the extent of things was much MUCH larger than anything local. Now I have something I can point my clients to and say "See, it wasn't my fault!"

And Dulan, I fail to see how it wasn't important to mudders. Obviously it was, and to other net users in general. When an attack cripples the net like this, most people think in terms of what they're not able to get to. Mudders who can't mud become irritable people as any host who deals with them should be able to tell you
Samson is offline   Reply With Quote
Old 01-25-2003, 08:24 PM   #11
Threshold
Legend
 
Threshold's Avatar
 
Join Date: Apr 2002
Home MUD: Threshold RPG
Posts: 1,241
Threshold will become famous soon enough
Ingham: I interpreted your statement as meaning it was lame to share the information from slashdot. If you weren't trying to flame, I apologize for my response (though please note that about 3/4 of my post was not copied and pasted from slashdot).

Dulan,

How can a major internet problem not be of interest to mudders and admins?

As has been made clear by multiple posts in this thread, the problem affected a lot of people. Since those people have already thanked me for sharing the information, I'd say it is plainly evident that the information WAS in fact useful.

As an example, before I posted it here, I asked on Threshold if there were people having trouble, and some of them HAD been having difficulties since last night. I would imagine many other mud player bases were similarly affected.

Furthermore, any DDoS that is reported to be majorly affecting UUnet can potentially affect almost everyone.

UUNet has 93,000 miles of fiber optic cables on 6 continents. It is the largest bandwidth provider in the world. 50 percent of all the e-mails in the world pass through UUNet backbone, as well as 70 percent of those that travel within the United States.

Additionally, when 5 of 13 root nameservers go down, that means many people might think their mud "disappeared", when in truth they just cannot reach it by name.

That kind of information is very valuable and helpful to mudders and mud admins.
Threshold is offline   Reply With Quote
Old 01-25-2003, 09:47 PM   #12
Ingham
 
Posts: n/a
Quote:
Originally Posted by (Threshold @ Jan. 25 2003,19:24)
Ingham: I interpreted your statement as meaning it was lame to share the information from slashdot. If you weren't trying to flame, I apologize for my response (though please note that about 3/4 of my post was not copied and pasted from slashdot).
That's all okay, never meant to flame you.
  Reply With Quote
Old 01-26-2003, 11:42 AM   #13
AlazlamBL
New Member
 
Join Date: May 2002
Posts: 27
AlazlamBL is on a distinguished road
Just wanted to say thanks for the heads up. It's helped relieve some confusion.
AlazlamBL is offline   Reply With Quote
Old 01-26-2003, 12:17 PM   #14
Threshold
Legend
 
Threshold's Avatar
 
Join Date: Apr 2002
Home MUD: Threshold RPG
Posts: 1,241
Threshold will become famous soon enough
Quote:
Originally Posted by
Ingham wrote:
That's all okay, never meant to flame you.
Then once again, I am sorry. Flaming happens so often for apparently no reason (see Dulan's post in this thread), it is easy to see flames where there is not even smoke!

Quote:
Originally Posted by
AlazlamBL wrote:
Just wanted to say thanks for the heads up. It's helped relieve some confusion.
You're welcome. I am glad the post explained what was going on yesterday to a number of people.
Threshold is offline   Reply With Quote
Reply


Thread Tools


MS SQL Server Worm Wreaking Havoc - Similar Threads
Thread Thread Starter Forum Replies Last Post
TMS Server Move imported_Synozeer TMS Announcements and Feedback 8 10-10-2006 10:59 AM
Mud Server Khadgar MUD Coding 3 12-31-2004 02:52 AM
Mud Server Project MUD Announcements 0 03-21-2004 08:33 PM
Server Issues Astin MUD Announcements 1 10-18-2002 12:56 AM
dotNET server Zoulz Advertising for Staff 7 08-26-2002 04:45 PM

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off

All times are GMT -4. The time now is 09:00 AM.


Powered by vBulletin® Version 3.6.7
Copyright ©2000 - 2017, Jelsoft Enterprises Ltd.
Style based on a design by Essilor
Copyright Top Mud Sites.com 2014