Results 1 to 2 of 2
  1. #1
    ABW Adviser Panel Dynamoo's Avatar
    Join Date
    January 18th, 2005
    Location
    Opposite the Slough of Despond
    Posts
    5,465
    Heads Up: MySQL worm reported
    There are reports of a possible worm impacting MySQL servers according to the Internet Storm Center. Details are patchy but it appears to impact Windows Hosts running MySQL (version numbers unclear) and it creates a process called spoolcll.exe.

    The advice seems to be to check that port 3306 is blocked/restricted at the firewall. No doubt anti-virus vendors will be working on a fix for this, but these worms spread awfully quickly. If you're hosting on a MySQL/Windows box, now might be a good time to ensure that you have some reliable backups.
    Innovative advertising with Slimeware Corporation and Telephore. Mail-order fuel with Petrol Direct.

  2. #2
    ABW Adviser Panel Dynamoo's Avatar
    Join Date
    January 18th, 2005
    Location
    Opposite the Slough of Despond
    Posts
    5,465
    The MySQL worm appears to be purely password based and goes for a brute force attack. Again, blocking or restricting access to port 3306 is probably the safest thing.

    This thing is growing very, very quickly. Latest info is at the ISC but at the moment they're still showing an Infocon of Green, so it's not considered to be a major risk yet.
    Innovative advertising with Slimeware Corporation and Telephore. Mail-order fuel with Petrol Direct.

  3. Newsletter Signup

+ Reply to Thread

Similar Threads

  1. New Worm Going Around..
    By Bob Lawrence in forum Virtual Family and Off-Topic
    Replies: 4
    Last Post: December 7th, 2008, 11:27 AM
  2. IMPORTANT: PHP Worm Reported
    By Dynamoo in forum Midnight Cafe'
    Replies: 3
    Last Post: December 21st, 2004, 01:13 PM
  3. New Worm
    By bob95603 in forum Midnight Cafe'
    Replies: 2
    Last Post: March 1st, 2004, 05:07 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •