
Updated SAINT 1.4.1 --> 1.5: Changes described below.

1/3/00:   Now you can scan multiple hosts, subnets, IP address
          ranges, subnet ranges, or any combination of the above
          from either the GUI or the command line.

1/4/00:   Fixed http.saint so that it will run smoothly.
	  It had been hanging on the campas and handler checks.

1/4/00:   Changed /200/ to /200 OK/ in http.saint to get rid
	  of false alarms caused by year 2000. Posted patch.

1/4/00:   Which timeout value to use (i.e. short, medium, long)
	  can now be selected in Configuration Management or
	  saint.cf. (It used to be only a command line option.)

1/4/00:   Changed todo.pl so that the most current timeout values
	  are used, eliminating the need to restart saint after
	  changing the timeout values

1/4/00:   Added two new severity categories:
	  denial-of-service (red) and information gathering (yellow)

1/5/00:   Upgraded finger, rusers, and rstatd to yellow
          (information gathering) from brown.  Upgraded
	  yp password file access to red (user read) from
	  yellow. (yp formerly had its own category that
	  wasn't fully recognized by reporting scripts)

1/6/00:   Added check for stacheldraht.

1/10/00:  TCP and UDP portscan timeouts can now be set
	  in the GUI
	  Removed %timeouts array from saint.cf and replaced
          it with scalar ${tool}_timeout variables in
	  order to implement the above

1/10/00:  Released SAINT 1.5 beta 1

1/11/00:  Fixed bug in dns-chk.saint.  Trailing \ was causing
	  false alarms.

1/13/00:  Fixed typo in ftp_bounce.saint.

1/14/00:  Fixed ostype.saint so that it accepts 1 or 2 arguments.
	  Patches submitted by Eric Wasser and Christopher Cramer.

1/17/00:  Changed ostype.saint to only scan ports 1-1024. This
	  will speed it up and will almost always be enough
	  to determine the operating system.

1/17/00:  Added printer.saint which checks for Linux lpd servers
	  which may be vulnerable to Quadruple Inverted Backflip.

1/17/00:  Added check for amd.

1/17/00:  Added mountd.sara to check for vulnerable Linux
	  mountd servers. mountd.sara was developed by Advanced
	  Research Corporation. (Note: As of SAINT-3.3.2 it
	  has been replaced by code developed entirely by WWDSI.)

1/17/00:  Fixed innd.saint to find all vulnerable versions
	  (< 1.6). Also fixed typo in tutorial name.

1/18/00:  Enabled cgi_other checks in http.saint, including
	  uploader.exe, args.cmd, and win-c-sample.exe.

1/19/00:  Added check for AIX 4.3.x ftpd buffer overflow.

1/19/00:  Added new module, backdoors.saint, which looks
	  for BO, NetBus, Drat, DeepThroat, NetSphere, GateCrasher
	  Portal of Doom, GirlFriend, Hack 'a' Tack, EvilFTP,
	  phAseZero, and SubSeven. As a results, took Windows
	  backdoor checks out of rules/facts.

1/20/00:  Added check for mail relaying. Based on code
	  from Advanced Research Corporation. (Note: it has
	  since been replaced by code developed by WWDSI.)

1/20/00:  Now you can specify a list of target hosts in a file,
	  either from Target Selection form or using -F on
	  command line.

1/20/00:  Released SAINT 1.5 beta 2

1/24/00:  Fixed ftp.saint and ostype.saint to accept FW and/or .PLUS
	  arguments. Patches submitted by Hans Sturm.

1/25/00:  Tru64 is now supported.  Added Tru64 to Makefile.
	  Compiles the same as OSF. Thanks to Andreas Koelz.

1/27/00:  Trimmed input string down to just a newline in
	  printer.saint.  lpd check is unreliable with longer
	  input strings.

1/27/00:  Fixed problem when reading target list from file.
          It wasn't handling spaces around dashes in IP
	  ranges, or multiple targets on one line.

1/27/00:  Cut some more uncommon ports out of ostype.saint
	  to get it to run faster.

1/27/00:  Filtered commas out of host types in ostype.saint to
	  fix bug in reporting by OS type.

1/27/00:  Changed rstatd back to brown severity.

1/27/00:  Released SAINT 1.5.

1/28/00:  Fixed broken link for SMTP mail relay tutorial.
	  Released SAINT 1.5 patch 1.

Updated SAINT 1.4 --> 1.4.1:  Changes described below.

11/24/99: Updated checks for BIND version and wu-ftpd version.
	  Added check for Calendar Manager service.

11/30/99: Fixed bug in Cold Fusion check in http.saint.
	  Changed test file from "set" to "/etc/group" for
	  the cgi-bin scripts so that all the exploits will work.

12/3/99:  Updated http.saint to check for msadcs.dll (ODBC RDS)
	  and IIS 4.0 .htr vulnerability. 
	  Re-enabled some checks for FrontPage extensions in
	  http.saint so that Netscape servers will be checked.
	  Added some new tutorials. Fixed some links in existing
	  tutorials.

12/3/99:  Released SAINT 1.4.1 BETA 1.

12/8/99:  Fixed bug in saint.cf. Space character was missing
	  after $firewall_flag variable.
          Re-released SAINT 1.4.1 BETA 1.

12/8/99:  Modified perl/config.pl to accept space characters
	  around equals sign in saint.cf

12/8/99:  Added missing trusted/trustee information for
          DNS denial-of-service vulnerabilities so they will
          appear in reports.

12/9/99:  Changed search string to 12345:TCP in rules/facts
	  to fix bug in Netbus detection.
12/9/99:  Added check for DRAT backdoor. Changed some broken
          links in backdoor tutorial.

12/15/99: Added check for Solaris sadmind.

12/16/99: Updated check for ssh version to include new vulnerabilities.

12/17/99: Updated pop3.sara to check for latest vulnerable QPOP versions,
          and modified code so that it is no longer dependent on bc,
          which is not present on all Unix systems

12/20/99: Added check for Trinoo.

12/21/99: Re-arranged order in which UDP ports are scanned, so that
	  important ports are sure to be scanned before timeout

12/22/99: Fixed bug in ftp_bounce check. (Arguments were reversed.)

12/22/99: Swapped "reconfig" and "make" in procedure in README
	  so that it will be the same as the html documentation

12/23/99: Uncommented $severities_host_count{$target}++; in
          severities.pl so that "sort by vulnerability count"
          would work (don't know why it was commented to begin with)

12/23/99: Finished tutorials for rootkits and FTP bounce

12/27/99: Released SAINT 1.4.1

Updated SAINT 1.3.9 --> 1.4:  Changes described below.

5/6/99:  Added login.saint, used for checking root kits and accounts that
         may not have passwords with them.

5/13/99: Added new checks to http.saint, includeing cold fusion checks,
         non-cgi-bin checks, IIS checks, FrontPage Checks

5/17/99: Added pop3 checks from SARA-2.0.3, Advanced Research Corp.
	 (Note: As of SAINT 3.3.2 it has been replaced by code developed
	 by WWDSI.)

5/18/99: Displays NetBIOS name if availible
5/18/99: Added new severity: "i" which will be for information purposes

5/24/99: Increased timeouts:  short_timeout is now 10, med_timeout is 20, 
         long_timeout is 30.  This is to help with the login.saint file.

5/24/99:  Added a check to see if server performs FTP bounce

5/28/99:  Added upgraded OS detection using NMAP from www.insecure.org, based
          on code from the Advanced Research Corop. If NMAP is present, then
          it will use, else, it will not. To get NMAP: www.insecure.org/nmap
          Default location is: /usr/local/bin/nmap (Note: OS detection code
	  has since been replaced by code developed entirely by WWDSI.)

6/1/99:   Beta 1 of saint-1.4 released. Missing updates to docs.  Looking for
          feedback on the login.saint module & ostype.saint.

6/2/99:   To help speed things up, http.saint now has some of the checks 
          commented out, but if one check is TRUE, then, most likely the
          others are also there.  However, You can uncomment then and check 
          yourself.

6/15/99:  Fixed bug found in sendmail.saint, thanks to Camiel Dobbelaar 
          <camield@inet.unisource.nl>, who found line 107 of sendmail.saint:
          $debuf_cmd should be $debug_cmd.  Also, Camiel pointed out a bug in
          the pattern matching using /200/, so that has been changed to 
          /\n200/.  

6/16/99:  Fixed bug found in dns.saint, thanks to Erik Wasser <fuzz@c-lab.de>
          who found the bug. The bug put a period after the hostname and
          then said it could not be found.

6/16/99:  Added first version of a perl wrapper script that can scan 
          class A, class B, class C networks in a specified time frame, ex:
          each day scan 9am - 5pm.  See the Notes about some of the 
          limitations in this version. 

6/17/99:  Now able to do multiple single machines, thanks to Erik Wasser
          <fuzz@c-lab.de>.  So no you can either do single, multiple, or subnet

8/3/99:   Added bug fixes found by Peter Nankivell <pgn@cs.monash.edu.au>,
          dealing witht he heavy+ setting of the scan.

8/16/99:  Added final HTML documentation for rootkits.html and FTP bounce.  
          The documentation needs a little more info, will come in next update.

8/19/99:  Release 1.4

Updated SAINT 1.3.8 --> 1.3.9:  Changes described below.

5/19/99:  Fixed compile bug on using GLIBC 2.1 libraries


Updated SAINT 1.3.7 --> 1.3.8:  Changes described below.

5/18/99:  Released SAINT with the GNU General Public License, SAINT is now
          Open Source.

Updated SAINT 1.3.6 --> 1.3.7:  Changes described below.

4/13/99:  Updated bin/http.saint to include more cgi's to look for.  Also
          have the output to the facts file tell what cgi was found.  Added
          document http_cgi_info.html as the tutorial.

4/13/99:  Updated bin/sendmail.saint to see if EXPN & VRFY can be used. These
          commands can give information about users on the system.  Added
          document Sendmail_exploits.html as the tutorial. 

4/14/99:  Updated bin/sendmail.saint to see if a person could use "decode"
          to change files on the system

4/14/99:  Updated the SSH_vulnerablilites tutorial.  Thanks to Thomas Payerle.

4/15/99:  Beta1  1.3.7 is Released.  Some things need to be done still.
          http_cgi_info.html & sendmail_info.html still need to be written.
          Also, more checks will be added.  Also need to update so other
          SAINT modules.

4/20/99:  Added inn.saint to check inn versions vulnerable to buffer
          overflow (ver < 1.6).

4/20/99:  Added More HTTP service checks.  Make sure none of the shell
          interpreters are in the cgi-bin directory.

4/21/99:  Modified ssh.sara code so that a fact will be added that at least
          shows ssh is running even when it is vulnerable.

4/22/99:  Beta2 1.3.7 is Released.  Need to finish up tutorials.  
          Next Version:  RootKit checks, see if your system has been
          already comprimised.  Also, mountd vulnerabilities.

4/23/99:  Added correction to the rpc.saint code to include rstatd

4/27/99:  Added more Sendmail checks, UUDECODE aliases and DEBUG command
          check.
 
4/29/99:  Added new tutorials.

4/29/99:  More tests need to be done on the updated ssh module, will store as
          ssh.sara.new

5/3/99:  Released SAINT 1.3.7
          SAINT 1.3.8 will contain:  rootkit checks, mountd checks, updated
          FTP checks, and better OS checking.
