
Updated SAINT 3.2.3 --> 3.2.4: Changes described below

5/14/01  Added check for A1-Stats CGI vulnerability.

5/14/01  Updated CVE to version 20010507.

5/15/01  Added check for IIS double-encoding vulnerability.

5/15/01  Raised http_timeout to 120.

5/16/01  Fixed several scripts to correctly resolve
	 services running on X-Windows ports.

5/16/01  Removed some debugging lines from scripts
	 in html/reporting.

5/16/01  Fixed bug in saint_info_host.pl where vulnerabilities
	 at different severity levels within the same
	 category were not being color-coded properly.

5/16/01  Released 3.2.4.

Updated SAINT 3.2.2 --> 3.2.3: Changes described below

5/4/01   Added check for new IMail 6.06 vulnerability.

5/4/01   Added check for backdoor configuration page in
	 Tektronix printers.

5/4/01   Added check for vulnerability in PerlCal.

5/4/01   Added check for vulnerabilities in Bugzilla.

5/4/01   Updated iPlanet tutorial to address memory
	 access vulnerability. Didn't require a change
	 to the check.

5/8/01   Added check for new Lion worm variant and
	 sadmind/IIS worm.

5/9/01   Added check for SGI rpc.espd vulnerability.

5/9/01   Released 3.2.3.

Updated SAINT 3.2.1 --> 3.2.2: Changes described below

4/16/01  Added check for talkback.cgi.

4/17/01  Fixed dot-color bug in saint_exclusion_list.pl.

4/17/01  Changed $Exclusions::autosave to default to 1
	 in &init_exclusions. Exclusions must be written
	 to the file to be processed by SAINTwriter.

4/17/01  Fixed extraneous 401 and 403 messages in
	 &auth_required and &admin_required.

4/17/01  Fixed unexclude_it.pl to pass the autosave parameter
	 to &drop_exclusion.

4/20/01  Added check for Lotus Domino HTTP pre 5.0.7.

4/20/01  Added check for cfingerd.

4/20/01  Added check for Trend Micro InterScan VirusWall.

4/20/01  Fixed bug in todo.pl where tcpscan.saint in
	 firewall mode wasn't being given the
	 $fw_tcp_scan timeout like it should.
	 Added $heavyplus_tcp_scan variable to fix.

4/23/01  Added check for QVT/Net popd.

4/23/01  Added check for CyberScheduler vulnerability.

4/30/01  Added check for Glacier backdoor.

4/30/01  Fixed bug in detection of WFTPD and updated
	 fix information in tutorial.

4/30/01  Added WFTPD to the filename globbing check.

4/30/01  Added check for lprw0rm.

4/30/01  Added check for vulnerable versions of
	 Mercury MTA pop3 for Netware.

4/30/01  Fixed pop3.sara to correctly handle mixed-case
	 OK messages and servers with "NT" in the host
	 name.

4/30/01  Changed finger.saint to a conditional probe
	 in saint.cf and saint_custom_form.pl, and
	 added todo rules to run twice, once for
	 finger info and once for version check.
	 Increased finger timeout to long timeout.
	 Removed the redundant conditional probes
	 from @heavy and @heavyplus while I was at it.
	 (They were already covered by the '*?'.)

5/1/01   Rearranged UDP port scan order so that 1-20
	 comes first. This is because udp_scan tends
	 to false alarm on some of the first ten ports
	 scanned, and we'd rather have that happen
	 on insignificant ports for now. The port
	 detection logic will need to be improved in
	 the future.

5/1/01   Released 3.2.2.

5/1/01	 Separated httpd version checks from RDS check
	 because some servers don't identify themselves
	 when file is not found.

5/2/01   Restructured Windows rules in hosttype rule set
	 to better distinguish between 95,98,NT, and 2000
	 based on NMAP output.

5/2/01   Added check for buffer overflow in IIS 5.0
	 for Windows 2000. Requires that hosttype now
	 be included in command-line usage of http.saint.

5/2/01   Released 3.2.2 release 2.

Updated SAINT 3.2 --> 3.2.1: Changes described below

4/9/01   Added documentation for the new features
	 introduced in 3.2 (exclusions, -k, saved merge).

4/9/01   Added new SAINTwriter variables hl_title
	 (host list title) and vl_title (vulnerability
	 list title) to SAINTwriter configuration form.

4/10/01  Added new SAINTwriter variable numeric_severities
	 to SAINTwriter configuration form.

4/10/01  Added new rule in rules/facts for SGI Sendmail.

4/10/01  Added check for filename globbing vulnerability.

4/10/01  Updated CVE table with latest candidates.

4/11/01  Added check for ntpd.

4/11/01  Added check for Alcatel ADSL modems.

4/11/01  Added use_exclusions and exclusions_file to
	 SAINTwriter configuration form.

4/12/01  Added check for Adore worm. Added -l option
	 (data length) to fping.c.

4/12/01  Fixed bug in udp_scan.c that was causing
	 some udp scans to hang forever on the test port.

4/12/01  Fixed make_service_exclusion_info to correctly
	 handle "other" services.

4/12/01  Released 3.2.1.

Updated SAINT 3.1.8 --> 3.2: Changes described below

4/5/01   Added capability to show, hide, and manage
	 false alarms (exclusions) from the GUI.
	 Based on code written by Tom Payerle under
	 SARA copyright (Advanced Research Corporation).
	 Adapted for SAINT with author's permission.

4/5/01   Changed some unclear wording in saint.cf.

4/6/01   Added $std_ports variable which contains
	 TCP ports to scan if $dont_use_ping or
	 $firewall_flag is selected.

4/6/01   Changed formatting on SAINT's main page. Forced
	 line breaks didn't look right on some browsers.

4/6/01   Added -k option to kill SAINT server in remote
	 mode. Can be combined with -p to kill server on
	 a specific port.

4/6/01   Added option to save database after a merge.

4/6/01   Released 3.2.

For previous changes see READMEs/CHANGES-2.2-3.1
