January 25, 2003

SQL Slammer worm doubles internet traffic

The SQLStructured Query Language — the standard language for querying relational databases. Slammer wormSelf-replicating malware that spreads across networks without needing a host file. spread on January 25, 2003 — exploiting an unpatched buffer overflow in MicrosoftThe software giant behind Windows, Office, Azure, and Xbox — founded by Bill Gates and Paul Allen. SQLStructured Query Language — the standard language for querying relational databases. Server and doubling global internet traffic within minutes.

What it was for

SQL SlammerSlammer was only 376 bytes — pure propagation with no payload beyond replication. It knocked out 911 dispatch systems, ATM networks, and South Korean broadband. DBAs learned that exposing SQLStructured Query Language — the standard language for querying relational databases. Server to the internet without patches was catastrophic; the wormSelf-replicating malware that spreads across networks without needing a host file. also popularized egress filtering and segmented database networks.

Companies

  • Microsoft

Why it's here

SQLStructured Query Language — the standard language for querying relational databases. Slammer was the fastest-spreading wormSelf-replicating malware that spreads across networks without needing a host file. in history at the time of its release.

Why it mattered

It proved database servers on public IPs were critical infrastructure vulnerabilities.

What it solved

Nothing initially — a single UDP packet could compromise unpatched SQLStructured Query Language — the standard language for querying relational databases. Server instances worldwide.

Media

  • SQL Slammer
    ImageSQL Slammer

    MUYcomputerPRO, CC BY-SA 4.0, via Wikimedia Commons

Related