eEye's report. "This worm has been dubbed the "Sapphire Worm" by eEye due to the fact that several engineers had to be pulled away from local bars to begin the investigation/dissection process."
CERTŪ Advisory CA-2003-04 MS-SQL Server Worm
Cisco access control list to block traffic on port 1433 and 1434.
****
access-list 115 deny udp any any eq 1433 log
access-list 115 deny udp any any eq 1434 log
access-list 115 permit ip any any
int
ip access-group 115 in
ip access-group 115 out
****