NOW READ THIS
("Security Advisory")
Submitted by: Bill Hickey
NCVA List Master
NRT-0371 Metaspoit Open-Source Computer Exploit Toolkit
Upgraded:
The Metasploit Project has updated its signature open-source
exploit framework to version 3.1, adding a new graphical interface for Windows
that will boost the number of researchers and white hat hackers who are able to
use the software. Scores of new exploit modules are said to be included with
the update, including several for the iPhone that Metasploit developer and
project manager H. D. Moore made public in late September 2007. "In
addition to the new Windows interface, this release includes exploits for an
unpatched kernel level vulnerability for NOvell Netware, a series of new 802.11
fuzzing modules that can be used to compromise numerous wireless devices, and a
collection of exploits for newly discovered vulnerabilities in Borland's
InterBase product," according to a warning from Symantec. "Once we
see something in Metasploit, we know it's likely we'll see it used in
attacks," said Symantec. Metasploit Framework 3.1 can be downloaded from
the project's web site free of charge.
(www.techworld.com 29JAN08)