There is a new Linux kernel exploit that apparently is being exploited big time:
What does this mean for us?
We need to make sure that _any_ of our client’s hosted services running on Linux have an up to date kernel. We do so by contacting the hosting provider to verify their systems.
Otherwise our client’s sites may end up serving some exploits.
Further to detecting whether a system has been exploited:
One of the linked to articles on Slashdot Linux: Hole in Linux Kernel Provides Root Rights has this comment which is just too funny not to point out:
Good to see a sense of humour there! :)
Microsoft Small Business Specialists
Co-Author: SBS 2008 Blueprint Book