
Updated SAINT 3.3.8 --> 3.3.9: Changes described below

8/27/01  Added check for NetWare Enterprise Server
	 user/group enumeration using ndsobj.nlm.

8/27/01  Added check for globbing denial of service in
	 glftpd.

8/29/01  Added check for HP-UX rlpdaemon.

8/29/01  Added check for LPRng DVI print filter
	 misconfiguration. (Tutorial change only.)

8/29/01  Added reference to MS 01-045 in Cross-site
	 scripting tutorial to address vulnerability
	 in ISA 2000 Server.

8/30/01  Added check for BSD lpd vulnerability.

8/30/01  Updated ftpd filename globbing tutorial with
	 reference to CIAC Bulletin L-135.

8/30/01  Added check for vulnerable versions of Inetserv
	 webmail interface.

8/30/01  Released 3.3.9.

Updated SAINT 3.3.7 --> 3.3.8: Changes described below

8/7/01   Added check for Cold Fusion exampleapps host
	 spoofing vulnerability.

8/16/01  Removed lines from relay.saint that were causing
	 script to abort when called with FW or .PLUS flags.
	 (Reported by Erik Wasser.)

8/21/01  Updated telnetd tutorial with Linux patch information.

8/21/01  Added check for NetCode GuestBook (book.cgi) and
	 SIX-webboard (generate.cgi).

8/21/01  Re-arranged http_cgi_access.html so that resolutions
	 appear directly below the corresponding problem.
	 Added index to the top of the Problems section.

8/22/01  Added check for default password in ZyXEL
	 Prestige routers.

8/22/01  Fixed bug in saint_run_action.pl. $tmp_target needed
	 to be cleared for targets specified by IP addresses,
	 to prevent old values from confusing the "view primary
	 target results" link.

8/22/01  Fixed exclusions.pl and saint-data.pl to properly
	 reset exclusions variables when opening a new database.
	 Services were not being displayed for new data sets
	 due to the old $service_flag not being cleared.
	 Bug reported by Mark Keppinger.

8/22/01  Added check for folder traversal vulnerability
	 in 4D web servers.

8/23/01  Fixed all links to Admin Guide to Cracking in
	 tutorials.

8/23/01  Added check for Sendmail tTflag vulnerability.

8/23/01  Released 3.3.8.

Updated SAINT 3.3.6 --> 3.3.7: Changes described below

7/27/01  Added reference to CERT Advisory 2001-23 (Code Red
	 worm) to Worm_detected.html.

7/31/01  Updated HP-UX ftpd globbing check to check for
	 new vendor patches. Also changed the format string
	 vulnerability check for HP-UX 11.00 ftpd to check
	 the date instead of the version number because
	 the version numbers are apparently re-used in 11.11.

8/1/01   Added check for WS_FTP buffer overflow.

8/2/01   Added reference to CIAC Bulletin L-128 (Kerberos 5
	 telnetd) to telnetd tutorial.

8/6/01   Added check for Code Red II worm.

8/6/01   Added check for phpMyAdmin tbl_copy.php vulnerability.

8/7/01   Released 3.3.7.

Updated SAINT 3.3.5 --> 3.3.6: Changes described below

7/23/01  Modified configure script to correctly
	 configure HP-UX 11.

7/24/01  Added documentation on scheduling scans using cron.

7/25/01  Added check for SSH 3.0.0 password authentication
	 vulnerability.

7/25/01  Added option to perform dangerous tests in
	 Target Selection.

7/25/01  Added check with extreme mode option for BSD
	 telnetd telrcv buffer overflow. Required addition
	 of -T option in tcp_scan.c to disable filtering
	 of telnet protocol options.

7/26/01  Released 3.3.6.

Updated SAINT 3.3.4 --> 3.3.5: Changes described below

7/5/01   Fixed saint_auth_action.pl to work with FreeBSD
	 MD5-style password encryption. Thanks to
	 Vladimir Kurtukov.

7/9/01   Changed maximum banner length to 4096 in
	 tcp_scan.c to accomodate cross-site scripting
	 checks where keyword is buried deep in the
	 service output.

7/9/01   Added check for cross-site scripting vulnerability
	 affecting a number of Java-enabled web servers.

7/9/01   Added new yellow severity level ycs for Intermediary
	 in Attack (cross-site scripting).

7/10/01  Changed links for CORE-SDI advisories to
	 Securityfocus because the CORE-SDI archive is gone.

7/10/01  Added check for Oracle 8i TNS listener.

7/11/01  To ensure consistency across different platforms
	 tcpscan.saint and udpscan.saint now disregard
	 the service name returned by tcp_scan and
	 udp_scan (derived from /etc/services) and use
	 only information from config/services. Also,
	 port number is included with service name.

7/11/01  Fixed broken links to RFCs in tutorials.

7/11/01  Added check for Windows 2000 mail server
	 authentication flaw (mail relaying).

7/16/01  Added checks for phpMyAdmin, phpPgAdmin, and
	 BasiliX web mail vulnerabilities.

7/16/01  Added check for UnixWare statd.

7/17/01  Added check for developer's shell in Cisco
	 storage routers.

7/18/01  Added check for Cold Fusion prior to 5.0.

7/18/01  Added check for Code Red worm.

7/18/01  Modified backdoor tutorial to document the
	 SubSeven backdoor and the risk it poses in
	 allowing the W32/Leave worm to spread. (tutorial
	 change only)

7/19/01  Added check for ldap and ssl-ldap to cover
	 vulnerabilities in multiple implementations.
	 Not to be confused with the Windows 2000 ssl-ldap
	 vulnerability which was added in 3.3.4.

7/19/01  Fixed bug causing false alarms in cross-site
	 scripting check.

7/19/01  Released 3.3.5.

Updated SAINT 3.3.3 --> 3.3.4: Changes described below

6/26/01  Added check for CGI vulnerability in
	 Screaming Media's SiteWare.

6/26/01  Added check for FrontPage server extensions
	 Visual Studio RAD support buffer overflow.

6/27/01  Changed NetBus check to only report port 12345
	 if NetBus signature is received, to avoid false
	 alarms with Trend Antivirus.

6/27/01  Modified documentation and saint_cf_form.pl to
	 inform user that crashes due to dangerous tests
	 may cause further tests against the same service
	 to result in false negatives.

6/27/01  Changed http.saint to recognize IIS's "500 Server
	 Error" response in addition to "500 Internal
	 Server Error".

6/28/01  Added incoming/ as another directory to check for
	 anonymous FTP writability.

6/29/01  Added check for Cisco web interface authentication
	 bypass.

6/29/01  Updated check and tutorial for yppasswdd based
	 on Sun Security Bulletin 203.

7/2/01   Added check for LDAP over SSL vulnerability in
	 Windows 2000.

7/3/01   Added check for Samba malformed Netbios name
	 vulnerability.

7/3/01   Added checks for multiple vulnerabilities in
	 InterScan VirusWall and InterScan WebManager.
	 (Tutorial change only, since checks for FtpSaveCSP.dll
	 and FtpSaveCVP.dll were already there.)

7/3/01   Added -R option to suppress password prompt in
	 remote mode.

7/3/01   Released 3.3.4.

Updated SAINT 3.3.2 --> 3.3.3: Changes described below

6/20/01  Fixed bug introduced in 3.3.2R2 where the
	 possible vulnerability in IIS 5 would still
	 come up in extreme mode. Fixed permissions
	 on bin/http.saint.

6/20/01  Added check for Solaris in.lpd.

6/20/01  Released 3.3.3.

Updated SAINT 3.3.1 --> 3.3.2: Changes described below

6/5/01   Rewrote pop3.saint (formerly pop3.sara) in PERL.
	 Changed mountd.saint (formerly mountd.sara)
	 to check OS version instead of doing an rpcinfo.
	 mountd.saint will now run whenever mountd or
	 nfsd is running.
	 Rewrote ftp_bounce.saint.

6/5/01   Fixed problem in http.saint where the check
	 for $always500 wasn't working.
	 Thanks to J.R. Wessels for reporting this bug.

6/5/01   Improved program logic in ostype.saint.

6/7/01   Fixed generate_html_header to correctly handle
	 titles.

6/7/01   Added win_login.saint to retrieve a list of
	 Windows account names and guess the passwords.
	 Added subroutines to netbios.pl to support
	 win_login.saint.

6/10/01  Added check for SpoonFTP buffer overflow.

6/15/01  Added check for Exim format string vulnerability.

6/15/01  Added check for Microsoft telnet server.

6/18/01  Added check for Trend Micro InterScan VirusWall
	 FtpSaveCSP.dll/FtpSaveCVP.dll.

6/18/01  Released 3.3.2.

6/18/01  Added check for IIS 5.0 vulnerability (.idq/ida).
	 Re-released 3.3.2.

Updated SAINT 3.3 --> 3.3.1: Changes described below

6/1/01   Added check for long path name vulnerability
	 in WFTPD. (Tutorial change only.)

6/1/01   Added check for Solaris rpc.yppasswdd and the
	 backdoor created by the exploit.

6/1/01   Added check for viewsrc.cgi.

6/1/01   Added check for signal handling race condition
	 in Sendmail.

6/1/01   Released 3.3.1.

Updated SAINT 3.2.4 --> 3.3: Changes described below

5/18/01  Added check for Microsoft Index Server.

5/18/01  Added check for DoS in Apache for Windows and OS/2.

5/18/01  Added check for iPlanet Web Publisher buffer
	 overflow. (Tutorial change only.)

5/18/01  Added "extreme" mode to perform buffer overflow
	 attacks. Added extreme-mode check for IIS 5
	 vulnerability.

5/22/01  Added perllib/netbios.pl containing functions
	 which implement Microsoft protocols. Added check
	 for registry access by null sessions.

5/23/01  Added support for multiple custom scan levels.

5/23/01  Changed all SAINTwriter configuration files not
	 to show a logo by default, because machines that
	 aren't connected to the Internet wouldn't display
	 the report until they timed out trying to retrieve
	 the image.

5/29/01  Added check for krb5 ftpd.

5/29/01  Added extreme mode checks for iPlanet Web
	 Publisher and request method buffer overflows.

5/29/01  Mostly rewrote http.saint, making it cleaner and
	 easier to maintain.

5/30/01  Added check for Directory Pro (directorypro.cgi).

5/30/01  Released 3.3.

For previous changes see READMEs/CHANGES-3.2
