Thanks xStainDx for this story.
The Internet Wide impact of routers being flooded with SQL attack messages can be laid directly at the feet of Microsoft.
The patch that would have prevented this problem (Microsoft Security Bulletin MS02-039, Q323875) is not only a manually applied patch, it is horribly obscure
The patch updates debug libraries that less than 1/100 or one per cent of the installations ever use. Most people do not even realize that SQL patches do not automatically install and thus think that if they use Windows update it will take care of them.
Wrong. This is why 99.9% of the machines were vulnerable despite having been warned in July.
Click Read More for the rest of the story!