'SQLsnake' Worm Blamed For Spike In Port 1433 Scans
By Brian McWilliams, Newsbytes
SAN MATEO, CALIFORNIA, U.S.A.,
21 May 2002, 11:04 AM CST
A mounting trail of evidence has security experts warning that a new
Internet worm targeting Microsoft SQL servers could be on the loose.
Since Monday, a sharp spike in remote probes of TCP port 1433, which
commonly is used by Microsoft's SQL database, has been reported by
many server administrators, according to SecurityFocus, which operates
an incident-reporting system called ARIS.
--snipped for brevity, full article at url above.