SQL Server attacks

Not long ago, after the servers hosted in the IDC room were configured, they returned to the company and wanted to work with peace of mind.

I did not expect that I often find it in a few days.ProgramThe operation is not normal.
The last check shows that the SQL service cannot be found. After connecting to the server, I found that the SQL Service was stopped and restarted. After several minutes, this was similar. Repeated times cannot be solved. Only calm down to study.

It is found that different IP addresses will send UDP packets to port 1433 of the server at regular intervals, which causes the SQL service to stop.

Alas, I have to talk about the security of the IDC room of Chongqing Unicom again. Forget it. Let's go right. I checked a lot of information and found that this is a security vulnerability in SQL2000. By using this bug, I sent a special UDP packet to 1433, which can cause the SQL service to go down.

What is the solution?

I also used SQL2000 and patched it. The Japanese Ms released patches to solve some internal problems. However, I am a man with high anti-Japanese sentiment and don't want to use it.

Check again, check again, and finally find the solution, it is a bit of trouble, but it is good to think about it, switch the server system to Windows2003, and change it directly, it will be OK.

However, new problems have emerged. SQL statements on MySQL 2003 cannot be remotely accessed or remotely accessed. Our client programs cannot run. Currently, the company uses the B/S structure.

Check again and check again. Hey hey, set sql2003 sp3b. Note that sp3b is not sp3a. Sp3a still cannot solve this problem

In fact, I have little experience solving the problem. I just need to check it again.