Slammer Worm Update for System Manager Software v3.3
January 30, 2003

HISTORY 

The worm, dubbed "Slammer" or "Sapphire" by antivirus companies, first appeared early the morning of January 25, and attacks a vulnerability in Microsoft® SQL Server? 2000 databases and Microsoft SQL Server 2000 data engine software. The worm, which does not attack the average home computer or appear to harm database contents, results in a large amount of network traffic that slows down legitimate traffic. (PC World, 1/27/03). 

REQUIRED ACTION for POWERLOGIC System Manager Software (SMS) Users 

Slammer attacks Microsoft SQL Server 2000 databases (both Server and Desktop editions), which in turn, impacts any SMS server product version 3.3 or greater (SMS3000 Server, SMS1500, PMX1500 and SMS121). Slammer does not attack, alter or destroy any data within the SMS databases, but rather resides in the memory of the infected computer and propagates itself from one Microsoft SQL database to other Microsoft SQL computers on the network. Thus the impact of this worm is not seen in the database files themselves but rather in the amount of network traffic that it generates. 

Microsoft's response is to apply the SQL Server 2000 SP3 that eradicates the Slammer worm from your machine. 

There is a procedure, which includes a document and several batch files, that covers the SQL Server 2000 SP3 patch will be available from the POWERLOGIC web site downloads area as well as the from POWERLOGIC Technical Support center (615-287-3400). The document will walk users through the steps necessary to remove the worm from an infected SMS machine. In addition to the document, users will be required to download files from Microsoft and Symantec websites (links to these sites will be included in the document). Please continue to check www.powerlogic.com for updates on document and batch file availability. 

All POWERLOGIC software currently shipping will include a notification that the Microsoft SQL Server 2000 SP3 update must be run after the SMS application is installed. Additionally, all future SMS products will require the SP3 to be run after the installation as well.