January 25, 2003
SQL Slammer worm doubles internet traffic
The SQLStructured Query Language — the standard language for querying relational databases. Slammer wormSelf-replicating malware that spreads across networks without needing a host file. spread on January 25, 2003 — exploiting an unpatched buffer overflow in MicrosoftThe software giant behind Windows, Office, Azure, and Xbox — founded by Bill Gates and Paul Allen. SQLStructured Query Language — the standard language for querying relational databases. Server and doubling global internet traffic within minutes.
What it was for
Slammer was only 376 bytes — pure propagation with no payload beyond replication. It knocked out 911 dispatch systems, ATM networks, and South Korean broadband. DBAs learned that exposing SQLStructured Query Language — the standard language for querying relational databases. Server to the internet without patches was catastrophic; the wormSelf-replicating malware that spreads across networks without needing a host file. also popularized egress filtering and segmented database networks.
Companies
- Microsoft
Why it's here
SQLStructured Query Language — the standard language for querying relational databases. Slammer was the fastest-spreading wormSelf-replicating malware that spreads across networks without needing a host file. in history at the time of its release.
Why it mattered
It proved database servers on public IPs were critical infrastructure vulnerabilities.
What it solved
Nothing initially — a single UDP packet could compromise unpatched SQLStructured Query Language — the standard language for querying relational databases. Server instances worldwide.
Media
ImageSQL SlammerMUYcomputerPRO, CC BY-SA 4.0, via Wikimedia Commons
Related
- Code Red worm targets IIS web serversJuly 19, 2001
- Morris worm spreads on the internetNovember 2, 1988
- OpenBSD team releases OpenSSHDecember 1, 1999