
Updated SAINT 3.3.2 --> 3.3.3: Changes described below

6/20/01  Fixed bug introduced in 3.3.2R2 where the
	 possible vulnerability in IIS 5 would still
	 come up in extreme mode. Fixed permissions
	 on bin/http.saint.

6/20/01  Added check for Solaris in.lpd.

6/20/01  Released 3.3.3.

Updated SAINT 3.3.1 --> 3.3.2: Changes described below

6/5/01   Rewrote pop3.saint (formerly pop3.sara) in PERL.
	 Changed mountd.saint (formerly mountd.sara)
	 to check OS version instead of doing an rpcinfo.
	 mountd.saint will now run whenever mountd or
	 nfsd is running.
	 Rewrote ftp_bounce.saint.

6/5/01   Fixed problem in http.saint where the check
	 for $always500 wasn't working.
	 Thanks to J.R. Wessels for reporting this bug.

6/5/01   Improved program logic in ostype.saint.

6/7/01   Fixed generate_html_header to correctly handle
	 titles.

6/7/01   Added win_login.saint to retrieve a list of
	 Windows account names and guess the passwords.
	 Added subroutines to netbios.pl to support
	 win_login.saint.

6/10/01  Added check for SpoonFTP buffer overflow.

6/15/01  Added check for Exim format string vulnerability.

6/15/01  Added check for Microsoft telnet server.

6/18/01  Added check for Trend Micro InterScan VirusWall
	 FtpSaveCSP.dll/FtpSaveCVP.dll.

6/18/01  Released 3.3.2.

6/18/01  Added check for IIS 5.0 vulnerability (.idq/ida).
	 Re-released 3.3.2.

Updated SAINT 3.3 --> 3.3.1: Changes described below

6/1/01   Added check for long path name vulnerability
	 in WFTPD. (Tutorial change only.)

6/1/01   Added check for Solaris rpc.yppasswdd and the
	 backdoor created by the exploit.

6/1/01   Added check for viewsrc.cgi.

6/1/01   Added check for signal handling race condition
	 in Sendmail.

6/1/01   Released 3.3.1.

Updated SAINT 3.2.4 --> 3.3: Changes described below

5/18/01  Added check for Microsoft Index Server.

5/18/01  Added check for DoS in Apache for Windows and OS/2.

5/18/01  Added check for iPlanet Web Publisher buffer
	 overflow. (Tutorial change only.)

5/18/01  Added "extreme" mode to perform buffer overflow
	 attacks. Added extreme-mode check for IIS 5
	 vulnerability.

5/22/01  Added perllib/netbios.pl containing functions
	 which implement Microsoft protocols. Added check
	 for registry access by null sessions.

5/23/01  Added support for multiple custom scan levels.

5/23/01  Changed all SAINTwriter configuration files not
	 to show a logo by default, because machines that
	 aren't connected to the Internet wouldn't display
	 the report until they timed out trying to retrieve
	 the image.

5/29/01  Added check for krb5 ftpd.

5/29/01  Added extreme mode checks for iPlanet Web
	 Publisher and request method buffer overflows.

5/29/01  Mostly rewrote http.saint, making it cleaner and
	 easier to maintain.

5/30/01  Added check for Directory Pro (directorypro.cgi).

5/30/01  Released 3.3.

For previous changes see READMEs/CHANGES-3.2
