Tech: Worm Alert -- SQL

Subject: RE: Technical: Worm Alert -- SQL
From: Escamillo
Date: 01 Jun 02 - 05:25 AM

Well, I should point out something that may clarify my point: all my input/output is concentrated in a unit of functions and objects which interface with flat files, so my programs do never deal directly with files. In a manner, I've emulated a database system with search and report tools. One last point: in Argentina, my system (complete application) sells for approx. 8,000 , while an Oracle configuration alone (without any application) would sell for 12,000 !

Sorry for the thread shift - ok, we were talking about worms.

Un abrazo - Andrés

Subject: RE: Technical: Worm Alert -- SQL
From: Bonnie Shaljean
Date: 01 Jun 02 - 05:24 AM

In the thread "Email from MS" there's a copy of an unsolicited email supposedly from Microsoft which looks very much like the virus that Pavane refers to above, in case you got one and want to compare contents.

Subject: RE: Technical: Worm Alert -- SQL
From: tooligan
Date: 01 Jun 02 - 03:58 AM

eh?

Subject: RE: Technical: Worm Alert -- SQL
From: Dave Bryant
Date: 01 Jun 02 - 03:51 AM

I wrote my first program (on an IBM 1401 - 16k of mememory) in 1963. I've worked on all sorts of kit in many different languages since - although I suppose COBOL was what I used most. Flat file definition and handling usually took the most time in any program.

Relational Databases makes the data handling so much easier. It also simplifies interfaces to other applications. Finding errors in data and producing reports "on the fly" are also a doddle using SQL or one of the more sophisticated database tools. Modern databases allow you to save Procedures, Triggers, Data Constraints etc all on the database. Give me Oracle any time.

Also, Oracle DBAs don't usually have much trouble finding a job...

Subject: RE: Technical: Worm Alert -- SQL
From: Escamillo
Date: 01 Jun 02 - 02:22 AM

When not singing, I am a professional applications programmer (have been Systems Programmer too) and everyday I find a reason to congratule myself for being so cavernary to not use databases at all.

After six months of evaluation, in 1997, I decided to keep my simple, reliable, pre-dimensioned flat files and hashing algorithms, and not enter the world of SQL bases. My advantage is that my customers are small companies with no more than 20 workstations, but the application is very sensible, it imposes very strict response times, and I could do it 20 to 200 times faster than the slowest database configurations. I didn't make a comparison with the fastest, but we should consider that a fast DB configuration would increase, in hard and soft, the cost of my system by 500 percent initially, and 1000% in maintenance.

Un abrazo - Andrés (in a veeeery comfortable cavern):)

Subject: RE: Technical: Worm Alert -- SQL
From: Dave Bryant
Date: 31 May 02 - 04:23 AM

I assume there could be dangers using ODBC connections to extract data from an ORACLE DB into an ACCESS one, but I think the only links I have like that, are via very restricted Read Only Oracle A/Cs. All my web-enabled links are via an ORACLE 8i client through a firewall.

Still fingers crossed......

Subject: RE: Technical: Worm Alert -- SQL
From: GUEST,Pavane
Date: 30 May 02 - 07:26 AM

SQL (Structured Query Language) is a Relational Database language, used by most Relational Database software (such as ORACLE).

SQL Server is Microsoft's implementation of the language and database, for Windows servers. (WIN NT etc).

Other versions of SQL will not be affected by a virus targetted at the Microsoft product.

(HOWEVER, note that there does appear to be a fake virus warning email circulating which purports to come from MICROSOFT. The supposed patch itself contains a virus so DO NOT INSTALL IT. MICROSOFT does not issue patches by unsolicited email.)

Subject: RE: Technical: Worm Alert -- SQL
From: Amos
Date: 29 May 02 - 12:24 PM

This probably shouldn't worry you, McGrath -- those who operate interactive databases which are driven by the SQL query and messaging protocol are vulnerable -- individual users' machines are not affected as far as I know. It hits those machines which are used to serve database information using the SQL language. Mudcat's servers may use SQL.

Hope this helps.

A

Subject: RE: Technical: Worm Alert -- SQL
From: McGrath of Harlow
Date: 29 May 02 - 11:48 AM

So in order to justify being worried about this what would we need to be doing?

Subject: Technical: Worm Alert -- SQL
From: Amos
Date: 29 May 02 - 11:16 AM

SQL Server Administrators - MS SQL Worm

Network security has identified a rapidly propagating worm (a.k.a. SQLsnake Worm) that exploits Microsoft SQL servers. A lightweight version of MS SQL, Microsoft SQLServer Desktop Edition (MSDE), may also be exploitable when it is installed on Windows Servers or Workstations. It is reported that MSDE may be available as a separate installation with the following packages:

- MS Access 2000

- Visio Enterprise Network Tools

- Microsoft Project Central

- Visual Studio

See MS KB Article #Q313418 for more info:

http://support.microsoft.com/default.aspx?scid=kb;en-us;Q322336

The extent of the damage caused by the SQLsnake worm has not been fully quantified / reported at this time but it is known to capture and redistribute captured account / password data to the Far East.

---

The above alert was received today from the network support department at our labs and is presumed reliable.

A