Symantec has posted a new version (1.0.3) that correctly identifies an
unpatched MSDE installation.

Thanks to David @ Symantec for following up with me, the tool can be
downloaded at:
http://securityresponse.symantec.com/avcenter/venc/data/w32.sqlexp.worm.
remo
val.tool.html

Trent.

-----Original Message-----
From: trent dilkie [mailto:trent (at) dilkie (dot) com [email concealed]]
Sent: Monday, January 27, 2003 12:46 PM
To: 'bugtraq (at) securityfocus (dot) com [email concealed]'
Subject: RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!

I just got a confirmation from Symantec. The fixSQLex.exe tool

(
http://securityresponse.symantec.com/avcenter/venc/data/w32.sqlexp.worm.
remo
val.tool.html )

DOES NOT DETECT or fix MSDE, only SQL Server. They are working on an
update, it should be posted today.

Trent.

[ reply ]