NOW READ THIS
("Security Advisory")



Submitted by: Bill Hickey
NCVA List Master

NRT-0371 Metaspoit Open-Source Computer Exploit Toolkit Upgraded:


The Metasploit Project has updated its signature open-source exploit framework to version 3.1, adding a new graphical interface for Windows that will boost the number of researchers and white hat hackers who are able to use the software. Scores of new exploit modules are said to be included with the update, including several for the iPhone that Metasploit developer and project manager H. D. Moore made public in late September 2007. "In addition to the new Windows interface, this release includes exploits for an unpatched kernel level vulnerability for NOvell Netware, a series of new 802.11 fuzzing modules that can be used to compromise numerous wireless devices, and a collection of exploits for newly discovered vulnerabilities in Borland's InterBase product," according to a warning from Symantec. "Once we see something in Metasploit, we know it's likely we'll see it used in attacks," said Symantec. Metasploit Framework 3.1 can be downloaded from the project's web site free of charge.

(www.techworld.com 29JAN08)


Last Modified: Sunday, 17-Feb-2008 11:30:04 EST