Buenas,
Resulta que ya me ha pasado dos noches.
Juego casi siempre con el cortafuegos puesto y anoche y antes de anoche me paso un mensaje de ataque y que iba a poner el bloqueo de emergencia.
El informe que aparece despues es este:
Tipo:Virus de red
Hora:2:08:35
Dirección:N/D
Protocolo:UDP
Dirección IP de origen:61.128.162.227
Puerto de origen:1033
Dirección IP de destino:
Puerto de destino:1434
Descripción:MS02-039_SQL_SERVER_RESOLUTION_EXPLOIT
Si sabéis porqué pasa o si a alguien le ha pasado me lo decís.
Gracias
cortafuegos y virus
Moderador: MODERACION
-
lethalzero
Details (en Anglais) :
MS02-039_SQL_SERVER_RESOLUTION_EXPLOIT
MS02-039_SQL_SERVER_RES_EXPLOIT This exploit attacks the unchecked buffer vulnerability that exists in the SQL Server Resolution Service. com/technet/security/bulletin/MS02-039. If you got this warning, it is an indication that a malicious piece of code passed through your network or your machine, but was detected by Trend Micro as MS02-039_SQL_SERVER_RESOLUTION_EXPLOIT.
(MS04-007) ASN.1 Vulnerability Could Allow Code Execution
This vulnerability is due to an unchecked buffer in the Microsoft ASN. 1 library. An attacker or a specially-designed malware can cause this buffer to overflow and execute code with system privileges on affected systems. With the ability to execute code with system privileges, the attacker or the malware may install programs, view and modify data, and create new accounts with full privil...
MS02-039_SQL_SERVER_RESOLUTION_EXPLOIT
MS02-039_SQL_SERVER_RES_EXPLOIT This exploit attacks the unchecked buffer vulnerability that exists in the SQL Server Resolution Service. com/technet/security/bulletin/MS02-039. If you got this warning, it is an indication that a malicious piece of code passed through your network or your machine, but was detected by Trend Micro as MS02-039_SQL_SERVER_RESOLUTION_EXPLOIT.
(MS04-007) ASN.1 Vulnerability Could Allow Code Execution
This vulnerability is due to an unchecked buffer in the Microsoft ASN. 1 library. An attacker or a specially-designed malware can cause this buffer to overflow and execute code with system privileges on affected systems. With the ability to execute code with system privileges, the attacker or the malware may install programs, view and modify data, and create new accounts with full privil...