ᾘᾟ῅ᾅᏤࢊࣱᵴᵳᵁᵒᵕᵐᵑᵔᵑ‫ࣖݣ‬ᵐᵎᵎᵖᵍᵏᵏᵍᵐᵕ
ᵦᶇᶒᵿᶁᶆᶇᴾᵧᶌᶁᶇᶂᶃᶌᶒᴾᵰᶃᶑᶎᶍᶌᶑᶃᴾᵲᶃᵿᶋ‫ݢ‬ဋჇ૓
Copyright © Hitachi Incident Response Team. 2008. All rights reserved.

Contentsᵏᵌᴾᾘᾟ῅ᾅỆ᧙ẴỦᏤࢊࣱ‫إ‬ԓᵐᵌᴾᵴᵳᵁᵒᵕᵐᵑᵔᵑỉಒᙲᵑᵌᴾᵴᵳᵁᵒᵕᵐᵑᵔᵑỉ‫ࣖݣ‬ኺዾᵒᵌᴾᵐᵎᵎᵖᵍᵗᵍᵏᵏᴾᵴᵳᵁᵒᵕᵐᵑᵔᵑॖᙸʩ੭˟
ᵓᵌᴾᏤࢊࣱ‫ࣖݣ‬ỉᛢ᫆

Copyright © Hitachi Incident Response Team. 2008. All rights reserved.

1ᾘᾟ῅ᾅỆ᧙ẴỦᏤࢊࣱ‫إ‬ԓᾉਖ਼ᆆ ᾘᾟ῅ᾅỆ᧙ẴỦᏤࢊࣱ‫إ‬ԓˑૠỊẆ‫ݲ‬ẲẵếỂỊẝỦầẆ‫ف‬ả
ềẟỦẇ
18
16
14NIST NVD
CERT/CC Vulnerability Notes

1210864202002

2003

200420052006

20072008

ᾘᾟ῅ᾅỆ᧙ẴỦᏤࢊࣱ‫إ‬ԓỉ౨ኧኽௐίᾁ὿὿ᾇ࠰ᾀᾀஉᾆଐ଺ໜὸ
© Hitachi Incident Response Team. 2008.

1ᾘᾟ῅ᾅỆ᧙ẴỦᏤࢊࣱ‫إ‬ԓᾉᾁ὿὿ᾇ࠰ᵡᵴᵣᵋᵐᵎᵎᵖᵋᵐᵎᵖᵓᾉᵱᵧᵮᶎᴾᵫᶓᶊᶒᶇᶎᶊᶃᴾᵰᶃᶋᶍᶒᶃᴾᵠᶓᶄᶄᶃᶐᴾᵭᶔᶃᶐᶄᶊᶍᶕᴾᵴᶓᶊᶌᶃᶐᵿᶀᶇᶊᶇᶒᶇᶃᶑ
ᵮᶓᶀᶊᶇᶑᶆᶃᶂᵘᴾᵎᵓᵍᵏᵐᵍᵐᵎᵎᵖẆᵡᵴᵱᵱᴾᵱᶃᶔᶃᶐᶇᶒᶗᵘᴾᵕᵌᵓᴾᵆᵦᵧᵥᵦᵇᵡᵴᵣᵋᵐᵎᵎᵖᵋᵏᵏᵓᵑᾉᵡᶇᶑᶁᶍᴾᵧᵭᵱᴾᵢᶓᵿᶊᵋᶑᶒᵿᶁᶉᴾᵰᶍᶓᶒᶃᶐᴾᵧᵮᶔᵔᴾᵢᶃᶌᶇᵿᶊᴾᵭᶄᴾᵱᶃᶐᶔᶇᶁᶃᴾᵴᶓᶊᶌᶃᶐᵿᶀᶇᶊᶇᶒᶗ
ᵮᶓᶀᶊᶇᶑᶆᶃᶂᵘᴾᵎᵑᵍᵐᵕᵍᵐᵎᵎᵖẆᵡᵴᵱᵱᴾᵱᶃᶔᶃᶐᶇᶒᶗᵘᴾᵕᵌᵏᴾᵆᵦᵧᵥᵦᵇᵡᵴᵣᵋᵐᵎᵎᵖᵋᵏᵎᵓᵕᾉᵭᶎᶃᶌᵠᵱᵢᴾᶇᶎᵔᵽᶁᶆᶃᶁᶉᵽᶐᶆᵎᶆᶂᶐᵆᵇᴾᶂᶃᶌᶇᵿᶊᴾᶍᶄᴾᶑᶃᶐᶔᶇᶁᶃ
ᵮᶓᶀᶊᶇᶑᶆᶃᶂᵘᴾᵎᵐᵍᵐᵖᵍᵐᵎᵎᵖẆᵡᵴᵱᵱᴾᵱᶃᶔᶃᶐᶇᶒᶗᵘᴾᵕᵌᵖᴾᵆᵦᵧᵥᵦᵇᵡᵴᵣᵋᵐᵎᵎᵖᵋᵎᵏᵕᵕᾉᵩᵟᵫᵣᴾᵮᶐᶍᶈᶃᶁᶒᴾᵧᵮᶔᵔᴾᵧᵮᵡᶍᶋᶎᴾᵦᶃᵿᶂᶃᶐᴾᵢᶃᶌᶇᵿᶊᴾᵭᶄᴾᵱᶃᶐᶔᶇᶁᶃᴾᵴᶓᶊᶌᶃᶐᵿᶀᶇᶊᶇᶒᶗ
ᵮᶓᶀᶊᶇᶑᶆᶃᶂᵘᴾᵎᵐᵍᵎᵕᵍᵐᵎᵎᵖẆᵡᵴᵱᵱᴾᵱᶃᶔᶃᶐᶇᶒᶗᵘᴾᵕᵌᵖᴾᵆᵦᵧᵥᵦᵇᵡᵴᵣᵋᵐᵎᵎᵖᵋᵎᵔᵑᵎᾉᵫᵮᶊᵿᶗᶃᶐᴾᵅᶓᶐᶊᵌᶁᵅᴾᵰᶃᶋᶍᶒᶃᴾᵦᶃᵿᶎᴾᵠᵿᶑᶃᶂᴾᵠᶓᶄᶄᶃᶐᴾᵭᶔᶃᶐᶄᶊᶍᶕᴾᵴᶓᶊᶌᶃᶐᵿᶀᶇᶊᶇᶒᶗ
ᵮᶓᶀᶊᶇᶑᶆᶃᶂᵘᴾᵎᵐᵍᵎᵔᵍᵐᵎᵎᵖẆᵡᵴᵱᵱᴾᵱᶃᶔᶃᶐᶇᶒᶗᵘᴾᵔᵌᵖᴾᵆᵫᵣᵢᵧᵳᵫᵇᵡᵴᵣᵋᵐᵎᵎᵖᵋᵎᵑᵓᵐᾉᵪᶇᶌᶓᶖᴾᶉᶃᶐᶌᶃᶊᴾᵧᵮᶔᵔᴾᶈᶓᶋᶀᶍᶅᶐᵿᶋᴾᶂᶃᶌᶇᵿᶊᴾᶍᶄᴾᶑᶃᶐᶔᶇᶁᶃ
ᵮᶓᶀᶊᶇᶑᶆᶃᶂᵘᴾᵎᵏᵍᵏᵖᵍᵐᵎᵎᵖẆᵡᵴᵱᵱᴾᵱᶃᶔᶃᶐᶇᶒᶗᵘᴾᵕᵌᵖᴾᵆᵦᵧᵥᵦᵇ© Hitachi Incident Response Team. 2008.

1ᾘᾟ῅ᾅỆ᧙ẴỦᏤࢊࣱ‫إ‬ԓᾉᾁ὿὿ᾇ࠰ᵡᵴᵣᵋᵐᵎᵎᵖᵋᵑᵖᵏᵔᾉᵡᶇᶑᶁᶍᴾᵮᵧᵶᴾᵿᶌᶂᴾᵟᵱᵟᴾᵟᶎᶎᶊᶇᵿᶌᶁᶃᴾᵧᵮᶔᵔᴾᵢᶃᶌᶇᵿᶊᴾᶍᶄᴾᵱᶃᶐᶔᶇᶁᶃᴾᵴᶓᶊᶌᶃᶐᵿᶀᶇᶊᶇᶒᶗ
ᵮᶓᶀᶊᶇᶑᶆᶃᶂᵘᴾᵏᵎᵍᵐᵑᵍᵐᵎᵎᵖẆ ᵡᵴᵱᵱᴾᵱᶃᶔᶃᶐᶇᶒᶗᵘᴾᵕᵌᵖᴾᵆᵦᵧᵥᵦᵇᵡᵴᵣᵋᵐᵎᵎᵖᵋᵒᵒᵎᵒᾉᵫᶓᶊᶒᶇᶎᶊᶃᴾᵴᶃᶌᶂᶍᶐᶑᴾᵧᵮᶔᵔᴾᵬᶃᶇᶅᶆᶀᶍᶐᴾᵢᶇᶑᶁᶍᶔᶃᶐᶗᴾᵮᶐᶍᶒᶍᶁᶍᶊᴾᵧᶋᶎᶊᶃᶋᶃᶌᶒᵿᶒᶇᶍᶌᴾᵟᶂᶂᶐᶃᶑᶑᴾᵱᶎᶍᶍᶄᶇᶌᶅᴾᵴᶓᶊᶌᶃᶐᵿᶀᶇᶊᶇᶒᶗ

VU#472363

ᵮᶓᶀᶊᶇᶑᶆᶃᶂᵘᴾᵏᵎᵍᵎᵑᵍᵐᵎᵎᵖẆ ᵡᵴᵱᵱᴾᵱᶃᶔᶃᶐᶇᶒᶗᵘᴾᵏᵎᵌᵎᴾᵆᵦᵧᵥᵦᵇẅẅẅẅẅᵡᵴᵣᵋᵐᵎᵎᵖᵋᵐᵒᵕᵔᾉ ᵫᶓᶊᶒᶇᶎᶊᶃᴾᵴᶃᶌᶂᶍᶐᶑᴾᵧᵮᶔᵔᴾᵬᶃᶇᶅᶆᶀᶍᶐᴾᵢᶇᶑᶁᶍᶔᶃᶐᶗᴾᵮᶐᶍᶒᶍᶁᶍᶊᴾᵧᶋᶎᶊᶃᶋᶃᶌᶒᵿᶒᶇᶍᶌᴾᵟᶂᶂᶐᶃᶑᶑᴾᵱᶎᶍᶍᶄᶇᶌᶅᴾᵴᶓᶊᶌᶃᶐᵿᶀᶇᶊᶇᶒᶗẅẅᵮᶓᶀᶊᶇᶑᶆᶃᶂᵘᴾᵏᵎᵍᵎᵑᵍᵐᵎᵎᵖẆ ᵡᵴᵱᵱᴾᵱᶃᶔᶃᶐᶇᶒᶗᵘᴾᵗᵌᵑᴾᵆᵦᵧᵥᵦᵇᵡᵴᵣᵋᵐᵎᵎᵖᵋᵑᵔᵖᵔᾉᵪᶇᶌᶓᶖᴾᵩᶃᶐᶌᶃᶊᴾᵀᶐᶒᵔᵽᶄᶇᶊᶊᵽᶌᶍᶂᶃᵆᵇᵀᴾᵪᶍᶁᵿᶊᴾᵢᶃᶌᶇᵿᶊᴾᶍᶄᴾᵱᶃᶐᶔᶇᶁᶃᴾᵴᶓᶊᶌᶃᶐᵿᶀᶇᶊᶇᶒᶗ
ᵮᶓᶀᶊᶇᶑᶆᶃᶂᵘᴾᵎᵖᵍᵏᵒᵍᵐᵎᵎᵖẆᵡᵴᵱᵱᴾᵱᶃᶔᶃᶐᶇᶒᶗᵘᴾᵒᵌᵗᴾᵆᵫᵣᵢᵧᵳᵫᵇẅᵡᵴᵣᵋᵐᵎᵎᵖᵋᵏᵓᵕᵔᾉᵟᶎᶎᶊᶃᴾᵫᵿᶁᴾᵭᵱᴾᵶᴾᵫᵿᶇᶊᴾᵫᶃᶋᶍᶐᶗᴾᵡᶍᶐᶐᶓᶎᶒᶇᶍᶌᴾᵴᶓᶊᶌᶃᶐᵿᶀᶇᶊᶇᶒᶗ
ᵮᶓᶀᶊᶇᶑᶆᶃᶂᵘᴾᵎᵔᵍᵎᵐᵍᵐᵎᵎᵖẆᵡᵴᵱᵱᴾᵱᶃᶔᶃᶐᶇᶒᶗᵘᴾᵔᵌᵖᴾᵆᵫᵣᵢᵧᵳᵫᵇᵡᵴᵣᵋᵐᵎᵎᵖᵋᵐᵏᵑᵔᾉᵪᶇᶌᶓᶖᴾᵩᶃᶐᶌᶃᶊᴾᵅᶇᶎᶇᶎᵔᵽᶐᶁᶔᵆᵇᵅᴾᵰᶃᶋᶍᶒᶃᴾᵢᶃᶌᶇᵿᶊᴾᶍᶄᴾᵱᶃᶐᶔᶇᶁᶃᴾᵴᶓᶊᶌᶃᶐᵿᶀᶇᶊᶇᶒᶗ
ᵮᶓᶀᶊᶇᶑᶆᶃᶂᵘᴾᵎᵓᵍᵏᵔᵍᵐᵎᵎᵖẆᵡᵴᵱᵱᴾᵱᶃᶔᶃᶐᶇᶒᶗᵘᴾᵕᵌᵖᴾᵆᵦᵧᵥᵦᵇẅ
© Hitachi Incident Response Team. 2008.

2

ᵴᵳᵁᵒᵕᵐᵑᵔᵑỉಒᙲίᵬᵱᵘᵬᶃᶇᶅᶆᶀᶍᶐᴾᵱᶍᶊᶇᶁᶇᶒᵿᶒᶇᶍᶌὸᵐᵎᵎᵖ࠰ᵗஉᵏᵏଐίஙὸỆܱ଀ẲẺẐᵴᵳᵁᵒᵕᵐᵑᵔᵑᴾॖᙸʩ੭˟ẑỆ஛൨බ೔ẰỮᾏᾘᾘᾙẦỤ੩ЈẰủẺ᝻૰ỂẴẇ© Hitachi Incident Response Team. 2008.

3

ᵴᵳᵁᵒᵕᵐᵑᵔᵑỉ‫ࣖݣ‬ኺዾᵴᵳᵁᵒᵕᵐᵑᵔᵑầлụ࢘ềỤủỦộỂỉ‫ࣖݣ‬ᵐᵎᵎᵖᵍᴾᵕᵍᵏᵕᵆஙᵇ ᵤᵵᵘᴾᵧᵮᶔᵔᴾᵬᶃᶇᶅᶆᶍᶓᶐᴾᵢᶇᶑᶁᶍᶔᶃᶐᶗᴾᵋ ᵴᶓᶊᶌᶃᶐᵿᶀᶇᶊᶇᶒᶗᴾᵰᶃᶑᶎᶍᶌᶑᶇᶀᶊᶃᴾᵢᶇᶑᶁᶊᶍᶑᶓᶐᶃỼὊἋἚἻἼỴỉᵟᶊᶁᵿᶒᶃᶊᵋᵪᶓᶁᶃᶌᶒỉႆᙸᎍẦỤᵧᵮᶔᵔᴾᵬᵢᵮỉᏤࢊࣱỆếẟềẆ
ᵐᵎᵎᵖ࠰ᵖஉᵏᵔଐỆ᧏ᅆẴỦểỉᚡ᠍ầẝỦἳὊἽửӖ̮ẴỦᅈϋ᧙̞ᎍỆᏤࢊࣱࢨ᪪ஊ໯ỉᄩᛐử‫᧏ޒ‬ẴỦᵐᵎᵎᵖᵍᴾᵕᵍᵏᵖᵆ᣿ᵇ ᅈϋ᧙̞ᎍẦỤᅈ‫ٳ‬ỉᙌԼ᧏ႆᎍỆờ‫᧏ޒ‬ẲẺẟểỉᡲዂửӖẬỦᵐᵎᵎᵖᵍᴾᵕᵍᵐᵎᵆଐᵇ ႆᙸᎍỆᅈ‫̞᧙ٳ‬ᎍồỉ‫᧏ޒ‬ӧԁỉᄩᛐửểỦႆᙸᎍẦỤỉ‫ׅ‬ሉỂẆᏤࢊࣱऴ‫إ‬ỉӕụৢẟཞඞử৭੮ẴỦ‫׎‬ϋỉᾘᾟ῅ᾅᙌԼ᧏ႆᎍỆऴ‫᧏ޒإ‬ẴỦ࣏ᙲầẝỦầẆỄạởẾề‫᧏ޒ‬ẴỦỉẦᾎऴ‫إ‬ἍỿἷἼἘỵଔ஖ᜩ়ἣὊἚὊἜὊἉἕἩửМဇỂẨỦầẆẸờẸờẆẮỉᏤࢊࣱỊ‫إ‬ԓỆ͌ẴỦᏤࢊࣱễỉẦίऴ‫᧏ޒإ‬ỉዬ࣯ࡇỊὸᾎᵐᵎᵎᵖᵍᴾᵕᵍᵐᵏᵆஉᵇ ᅈ‫ٳ‬ᾘᾟ῅ᾅᙌԼ᧏ႆᎍỉჷụӳẟỆẆࢨ᪪ࡇỆếẟềႻᛩẴỦᵐᵎᵎᵖᵍᴾᵕᵍᵐᵐᵆ້ᵇ ᾘᾟᾐỆ‫إ‬ԓẴỦί Ẕᵧᵮᵟᵁᵖᵕᵒᵑᵒᵈᵈᵈẕ ‫ފ‬Јऴ‫إ‬ểẲềӖ̮ẰủỦὸႆᙸᎍẦỤᵴᵳᵁᵒᵕᵐᵑᵔᵑầлụ࢘ềỤủẺểỉᡲዂầλỦᵐᵎᵎᵖᵍᴾᵕᵍᵐᵑᵆ൦ᵇ ᾘᾟᾐỆᵴᵳᵁᵒᵕᵐᵑᵔᵑầлụ࢘ềỤủẺểỉᡲዂửλủỦᵐᵎᵎᵖᵍᴾᵕᵍᵑᵏᵆஙᵇ ᵡᵣᵰᵲᵍᵡᵡẦỤᵴᵳᵁᵒᵕᵐᵑᵔᵑỆ᧙ẴỦᏤࢊࣱऴ‫إ‬ửӖ̮ẴỦ© Hitachi Incident Response Team. 2008.

3

ᵴᵳᵁᵒᵕᵐᵑᵔᵑỉ‫ࣖݣ‬ኺዾ

ᵴᵳᵁᵒᵕᵐᵑᵔᵑầлụ࢘ềỤủẺࢸỉ‫ࣖݣ‬ᵐᵎᵎᵖᵍᴾᵖᵍᴾᵕᵆஙᵇ ᅈϋ᧙̞ᎍẦỤႻʝ੗ዓỆࢨ᪪ầỂỦẮểờᎋảỤủỦểỉᡲዂửӖẬỦᵐᵎᵎᵖᵍᴾᵖᵍᵏᵏᵆஉᵇ ᅈ‫ٳ‬ᾘᾟ῅ᾅᙌԼ᧏ႆᎍỉჷụӳẟỆẆ‫ࣖݣ‬ỉỺἋỽἾὊἉἹὅỆếẟềႻᛩẴỦᵐᵎᵎᵖᵍᴾᵖᵍᵐᵏᵆஙᵇ ᵡᵣᵰᵲᵍᵡᵡầᾘᾟ῅ᾅဇỉऴ‫إ‬ʩ੭ᾜᾛử᧏ᚨẴỦᵐᵎᵎᵖᵍᴾᵗᵍᴾᵏᵆஉᵇ ᅈ‫ٳ‬ᾘᾟ῅ᾅᙌԼ᧏ႆᎍỉჷụӳẟểẆ‫ࣖݣ‬ỉỺἋỽἾὊἉἹὅỆếẟềႻᛩẴỦᾡᾕᾒỆἩἾἧỵἕἁἋἓỹἕἁίᾝᾴῃᾑᾢᾓỂỉ‫ݣ‬ሊὸỆ᧙ẴỦᚡ᠍ỊễẟẇỂỊẆᵰᵤᵡỆଢᚡẰủềẟễẟᏤࢊࣱ‫ࣖݣ‬ሊửỄạৢạỔẨễỉẦᾎྵཞỉᾝᾓᾟỉˁಮỆ̔‫܍‬ẲẺἩἿἚἅἽầ‫נ܍‬ẴỦẦờẲủễẟẇᵧᵮᶔᵔᴾᵰᶃᵿᶂᶗᴾᵪᶍᶅᶍồỉࢨ᪪ầẝỦẦờẲủễẟẇᾙᾟᾒᾔᾡᾣ὾ᾒᾒỆᾘᾟ῅ᾅᙌԼ᧏ႆᎍầॖᙸʩ੭ẴỦẺỜỉ‫ئ‬ί‫ݣ‬ሊễỤỎỆẆ‫ݣ‬ሊỆˤạࢨ᪪Ệếẟềὸỉᚨ‫ܭ‬ử̔᫂ẴỦᵐᵎᵎᵖᵍᴾᵗᵍᵏᵏᵆஙᵇ ᵴᵳᵁᵒᵕᵐᵑᵔᵑॖᙸʩ੭˟ί‫ئ‬৑ᾉᵨᵮᵡᵣᵰᵲᵍᵡᵡὸᵐᵎᵎᵖᵍᴾᵗᵍᵐᵓᵆ᣿ᵇ ᾘᾟ῅ᾅဇỉऴ‫إ‬ʩ੭ᾜᾛỆෙ‫ٳ‬ᙌԼ᧏ႆᎍɼ͵ỉ˟ᜭకϋầ්ủỦᵐᵎᵎᵖᵍᴾᵗᵍᵐᵖᵆଐᵇ ᵡᵣᵰᵲᵍᵡᵡỆᵴᵳᵁᵒᵕᵐᵑᵔᵑॖᙸʩ੭˟ỉ౨᚛ኽௐử‫إ‬ԓẴỦᵐᵎᵎᵖᵍᵏᵎᵍᴾᵏᵆ൦ᵇ ᵨᵮᵡᵣᵰᵲᵍᵡᵡỆᵴᵳᵁᵒᵕᵐᵑᵔᵑॖᙸʩ੭˟ᜭʙ᥵ỉᣐࠋử̔᫂ẴỦᵐᵎᵎᵖᵍᵏᵎᵍᴾᵑᵆ᣿ᵇ ᵴᵳᵁᵒᵕᵐᵑᵔᵑỉπ᧏© Hitachi Incident Response Team. 2008.

4ᵐᵎᵎᵖᵍᵗᵍᵏᵏᴾᵴᵳᵁᵒᵕᵐᵑᵔᵑॖᙸʩ੭˟

ᾀώॖᙸʩ੭˟᧏͵ỉឯଓᾘᾟ῅ᾅỉܱМဇầᡶỮỂẟỦẮểờẝụẆᾘᾟ῅ᾅỆ᧙ẴỦᏤࢊࣱầ‫إ‬ԓẰủỊẳỜẺẇᏤࢊࣱỆợẾềỊẆܱᘺ̔‫܍‬὾ˁಮ̔‫܍‬ẦỊẾẨụẲễẟểẨờẝỦẇộẺẆ‫ݣ‬ϼ૾ඥỆợẾềỊẆႻʝ੗ዓࣱử᧹ܹẴỦӧᏡࣱờẝỦẇẮủỤỉཞඞử៊ộảẆʻࢸẆᾘᾟ῅ᾅỆ᧙ẴỦᏤࢊࣱầ‫إ‬ԓầẰủẺểẨỆẆᙌԼ᧏ႆᎍ᧓Ểॖᙸʩ੭ỂẨỦ‫ئ‬ử˺ẾềẟẪẮểẆẸỉφ˳ႎễʙ̊ᆢɥậểẲềẆᵴᵳᵁᵒᵕᵐᵑᵔᵑᴾỆ᧙ẴỦॖᙸʩ੭˟ử᧏͵ẲẺẇ© Hitachi Incident Response Team. 2008.

4ᵐᵎᵎᵖᵍᵗᵍᵏᵏᴾᵴᵳᵁᵒᵕᵐᵑᵔᵑॖᙸʩ੭˟

ᾁώᜭʙϋܾ
ᵆᵏᵇᴾᵬᵢᵮỉᏤࢊࣱểẸỉ‫ݣ‬ሊỆếẟềᵴᵳᵁᵒᵕᵐᵑᵔᵑỉᏤࢊࣱỉಒᙲểẸỉࢨ᪪ỆếẟềᚐᛟẲẺᵹᵏᵻẇᵆᵐᵇᴾܱᘺἫὊἋỂỉ‫ݣ‬ϼểẆˁಮἫὊἋỉ‫ݣ‬ϼỉ૾ӼࣱܱᘺἫὊἋỂỉ‫ݣ‬ϼểẲềẆᄊూ૾ࡸίᵬᵱἳἕἍὊἊửᄊూẲẆࣖሉờẲễẟᵇể᩼ỿἵἕἉἷ૾ࡸίᵬᵱἳἕἍὊἊỆ‫ݣ‬ẲềࣖሉỊẴỦầẆỿἵἕἉἷỺὅἚἼử˺঺ẲễẟὸầẝỦẇ౨᚛ỉኽௐẆᄊూ૾ࡸỊẆܱᢃဇỆࢨ᪪ẴỦӧᏡࣱầẝỦẮểẦỤẆ᩼ỿἵἕἉἷ૾ࡸầᑣẟểẟạኽᛯỆᐱẾẺίܱᘺἫὊἋỂỉ‫ݣ‬ϼӧὸẇᵆᵑᵇᴾᵧᵮᶔᵔᴾᵰᶃᵿᶂᶗᴾᵪᶍᶅᶍồỉࢨ᪪ᄊూ૾ࡸẆ᩼ỿἵἕἉἷ૾ࡸỉẟẵủờẆᵧᵮᶔᵔᴾᵰᶃᵿᶂᶗᴾᵪᶍᶅᶍӕࢽỆ᧙Ẳềࢨ᪪ỊễẟẮểửᄩᛐẲẺẇ
ᵆᵒᵇᴾ‫׎‬ϋỂỉᾘᾟ῅ᾅဇỉऴ‫إ‬ʩ੭ᾜᾛỉᇌẼɥậỆếẟềऴ‫إ‬ỉӕụৢẟễỄᢃဇɥỉᛢ᫆ỊസỦầẆᾘᾟ῅ᾅỆ᧙ẴỦᏤࢊࣱầ‫إ‬ԓẰủẺᨥỉ౨᚛˟᧏͵ᡫჷởẆॖᙸʩ੭ỉ‫ئ‬ểẲềẆ‫׎‬ϋဇỉᾘᾟ῅ᾅဇỉऴ‫إ‬ʩ੭ᾜᾛỊ໯ẟợụỊẆஊỦ૾ầᑣẟểẟạኽᛯỆᐱẾẺẇ© Hitachi Incident Response Team. 2008.

5Ꮴࢊࣱ‫ࣖݣ‬ỉᛢ᫆ ᵴᵳᵁᵒᵕᵐᵑᵔᵑầлụ࢘ềỤủỦộỂỉ‫ࣖݣ‬ỆấẬỦᛢ᫆ ‫׎‬ϋỉᾘᾟ῅ᾅᙌԼ᧏ႆᎍỆऴ‫᧏ޒإ‬ẴỦ࣏ᙲầẝỦầẆỄạởẾề‫᧏ޒ‬ẴỦỉẦᾎ ऴ‫إ‬ἍỿἷἼἘỵଔ஖ᜩ়ἣὊἚὊἜὊἉἕἩửМဇỂẨỦầẆẸờẸờẆẮỉᏤࢊࣱỊ‫إ‬ԓỆ͌ẴỦᏤࢊࣱễỉẦίऴ‫᧏ޒإ‬ỉዬ࣯ࡇỊὸᾎ ᵴᵳᵁᵒᵕᵐᵑᵔᵑầлụ࢘ềỤủẺࢸỉ‫ࣖݣ‬ỆấẬỦᛢ᫆ ܱᘺἫὊἋỂỉ‫ݣ‬ϼểẆˁಮἫὊἋỉ‫ݣ‬ϼỉ૾ӼࣱửႻᛩẴỦ‫ئ‬Ị࣏ᙲỂỊẝỦầẆỄạởẾềॖᙸʩ੭ỉ‫ئ‬ửᛦૢẴỦỉẦᾎ ˁಮἫὊἋỉ‫ݣ‬ϼầ࣏ᙲểễẾẺ‫ئ‬ӳỉᡶỜ૾ỊᾎḷᏤࢊࣱ‫ݣ‬ሊỉẺỜỉ‫׎‬ϋᙌԼ᧏ႆᎍ᧓ỉ್ᡲઃỊႆ‫ޒ‬ᡦɥỆẝỦẇ© Hitachi Incident Response Team. 2008.

6Ӌᎋऴ‫إ‬ᵏᵌᴾᵬᵢᵮỉᏤࢊࣱểẸỉ‫ݣ‬ሊỆếẟềॖᙸʩ੭˟᧏͵ỆẝẺụẆ஛൨ẰỮᾏᾘᾘᾙẆ˱ҾẰỮᾏᾘᾘᾙỆᵴᵳᵁᵒᵕᵐᵑᵔᵑỉᏤࢊࣱỆếẟềỉᚐᛟ᝻૰ửแͳẲề᪬ẨộẲẺẇᵐᵌᴾᵴᵳᵁᵒᵕᵐᵑᵔᵑᵧᵮᶔᵔᴾܱᘺỆấẬỦ ᵤᶍᶐᶕᵿᶐᶂᴾᵧᶌᶄᶍᶐᶋᵿᶒᶇᶍᶌᴾᵠᵿᶑᶃᴾỉỴἕἩἙὊἚỆ᧙ẴỦբ᫆ᶆᶒᶒᶎᵘᵍᵍᶕᶕᶕᵌᶉᶀᵌᶁᶃᶐᶒᵌᶍᶐᶅᵍᶔᶓᶊᶑᵍᶇᶂᵍᵒᵕᵐᵑᵔᵑ
ᶆᶒᶒᶎᵘᵍᵍᶈᶔᶌᵌᶈᶎᵍᶁᶃᶐᶒᵍᵨᵴᵬᵴᵳᵒᵕᵐᵑᵔᵑᵍᶇᶌᶂᶃᶖᵌᶆᶒᶋᶊ

ᵑᵌᴾᵧᵮᶔᵔᴾᵰᶃᵿᶂᶗᴾᵪᶍᶅᶍᴾᵮᶐᶍᶅᶐᵿᶋ
ᶆᶒᶒᶎᵘᵍᵍᶁᶄᵌᶔᵔᶎᶁᵌᶈᶎᵍᵒᵌᴾᵬᶃᶒᵠᵱᵢỂỉ‫ݣ‬ሊᶆᶒᶒᶎᵘᵍᵍᶁᶔᶑᶕᶃᶀᵌᶌᶃᶒᶀᶑᶂᵌᶍᶐᶅᵍᶀᶑᶂᶕᶃᶀᵌᶁᶅᶇᵍᶑᶐᶁᵍᶑᶗᶑᵍᶌᶃᶒᶇᶌᶃᶒᵔᵍᶌᶂᵔᵽᶌᶀᶐᵌᶁᵌᶂᶇᶄᶄᵝᶐᵏᵛᵏᵌᵖᵖᵄᶐᵐᵛᵏᵌᵗᵎ

© Hitachi Incident Response Team. 2008.

6

ᵬᵢᵮỉᏤࢊࣱểẸỉ‫ݣ‬ሊỆếẟề© Hitachi Incident Response Team. 2008.

6ᵬᵢᵮỉᏤࢊࣱểẸỉ‫ݣ‬ሊỆếẟề© Hitachi Incident Response Team. 2008.

6

ᵬᵢᵮỉᏤࢊࣱểẸỉ‫ݣ‬ሊỆếẟề© Hitachi Incident Response Team. 2008.

6ᵬᵢᵮỉᏤࢊࣱểẸỉ‫ݣ‬ሊỆếẟề© Hitachi Incident Response Team. 2008.

6

ᵬᵢᵮỉᏤࢊࣱểẸỉ‫ݣ‬ሊỆếẟề© Hitachi Incident Response Team. 2008.

6ᵬᵢᵮỉᏤࢊࣱểẸỉ‫ݣ‬ሊỆếẟề© Hitachi Incident Response Team. 2008.

ENDᾘᾟ῅ᾅᏤࢊࣱ
ᵴᵳᵁᵒᵕᵐᵑᵔᵑ‫ࣖݣ‬ᵐᵎᵎᵖᵍᵏᵏᵍᵐᵕ
ᵦᶇᶒᵿᶁᶆᶇᴾᵧᶌᶁᶇᶂᶃᶌᶒᴾᵰᶃᶑᶎᶍᶌᶑᶃᴾᵲᶃᵿᶋ‫ݢ‬ဋჇ૓

Copyright © Hitachi Incident Response Team. 2008. All rights reserved.