For more than the second level of attack you should pay special attention to the. Because they can continue to enhance the level of attacks to penetrate Linux server. At this point, we can take counter-measures are: ] all the passwords to change the system to notify users that new look for the system administrator password. ] isolate the network segment to attack only in a small range. ] Allow behavior to continue. If possible, do not rush to put the attacker out of the system, to prepare for the next step. ] Record all, the collection of evidence. The evidence includes: the system registry files, application log files, AAA log file, RADIUS login, network elements registry, firewall log, HIDS event, NIDS incidents, disk drives, hidden files. Collection of evidence to the attention of: moving or demolition of any equipment to be photographed before; in the survey to follow two rules in the information collection should be at least two people, to prevent tampering of information; shall record all steps taken and the Any change configuration settings, to make all these records are kept in a safe place. Check the system access permissions for all directories to detect whether Permslist been modified.
Tuesdays fifth amendment Security Bulletin MS07-018 Content Management Server in the two flaws, one of which is identified as "critical", through the use of this flaw, an attacker can get the site using Microsoft software control. Ministry of Commerce spokesman on U.S. decision to Chinas intellectual property rights, market access of publications issued a statement to resort to WTO negotiations, U.S. Trade Representative Susan Schwab announced that the U.S. decision to IPR issues, publication of market access issue to the WTO dispute settlement mechanism, which the Chinese side expressed great regret and strong dissatisfaction.