Microsoft SQL is a database management system, and its Server Resolution Service is a way external devices can request details on the MS SQL server running on a network. When exposed to the wider Internet, the Server Resolution Service can be used by a third party to commit abuse. Your compromised or misconfigured device is publicly accessible on the Internet, and therefore the scanning that is performed by these organizations is not within your private network. Adevice connected to your network may have an open MS SQL Server Resolution Service vulnerability.

If the settings are left open they can be exploited to unwittingly participate in malicious activities, for example a Distributed Denial of Service (DDoS) attack.

Source: www.virginmedia.com

Share →