Tech Shout!

Software Giant Microsoft is warning its users about malicious software that could just be used to attack Windows systems, which are not protected by the company’s latest security updates. Microsoft has rated the bug as critical. The exploit code targets a vulnerability in the Remote Access Connection Manager (RASMAN) service, which Windows uses to create network connections over the telephone.

Hackers published the code on various websites last week and is now included in Metasploit, which is a hacking toolkit that both security researchers and criminals use. Hackers are likely to use the malicious software in criminal attacks now that it is in Metasploit, said Ken Williams, director of vulnerability research with CA Inc.

Users of Windows 2000 and Windows XP Service Pack 1 need to be wary, because they could be victimized by particularly nasty attacks that do not require authentication, Microsoft said.

Computers that use Windows’s dial-up scripting or terminal windows to make connections may find that their dial-up connections no longer work. Microsoft issued an advisory saying that those users, who cannot install the patch immediately, should disable the RASMAN service.

Over the last two weeks, Microsoft has be dealing with a number of unpatched vulnerabilities in its Office and Excel software. Microsoft hasn’t been able to patch these bugs as yet, but said that one of them should be patched in the company’s next round of security updates, due on July 11.