25 December 2002 (SARA-4.1.3)
    o Beginning rules-based facility for SARA 5.
    o Added cgi test for newdsn.exe (CVE-1999-0191)
    o Added tests for Microsoft IIS Executable File Parsing (CVE-2000-0886)
    o Updated smb.sara to check for user enumeration (CVE-1999-0503)
    o Updated smb.sara to infer registry access (CVE-1999-0562)
    o Updated smb.sara to check for guessable passwords (CVE-1999-0518)
    o Updated to detect vulnerable mysql services (CVE-2000-0148),
      (CAN-2002-1373),(CAN-2002-1373)
    o Updated dns-chk.sara to detect CAN-2002-0029
    o Fixed minor bugs in xml generator
    o Updated Copyright notice in COPYING

5 November 2002 (SARA-4.1.2)
    o Major changes to XML report generator
    o Scheduler updated for faster scans
    o sara.cf updated for faster scans
    o tcpscan.sara updateed for faster scans

2 October 2002 (SARA-4.1.1)
    o Added test for '8-11' Windows backdoor
    o Updated XML interface
    o Updated CSV interface to include service and port
    o Tweaked tcpscan.sara for performance
    o Updated XML tag descriptions
    o Downgraded ssh vulnerabilities to YELLOW (RH problems)
    o Added MAC proxy interface 
    o Supports new FBI/SANS Top 20 Consensus List (2 Oct '02)

18 Spetember (SARA-4.0.3)
    o Internal and Customer release

20 August 2002 (SARA-4.0.1)
    o Added XML format to ReportWriter
    o Updated to CVE Version 20020625
    o Added 'dig' support for dns checks
    o Updated smb.sara to handle new rpcclient arguments
    o Added test for backdoor based on bnc variant
    o Added test for binshell backdoor.

12 August 2002 (SARA-3.6.3c)
    o Added test for OpenSSL vulnerabilities
    o Added tests for PHP vulnerabilities
    o Added test for Apache pre 2.0.39 (non Unix) exploit
    o Fixed configure to build rpcgen correctly
    o Fixed problem with tcpscan.sara
    o Fixed problem with MS Terminal tutorial
    o Fixed HTML error in tutorials (problem with MS Word conversion)
    o Enhanced the correction facility in the ReportWriter

19 July 2002 (SARA-3.6.3)
    o Changed to scan all tcp ports (extreme only)
    o Fixed bug in ssh.sara
    o Fixed false positives for various shell problems (http.sara)
    o removed test for search.pl [too many false positives (http.sara)
    o Added test for MS Service Encapsulated Vulnerability (bid 5213)
    o Updated tutorial for tooltalk vulnerability (bid 5082)
    o Adjusted tcp_scan to handle large port scans
    o Added konqueror and galeon browsers as standard SARA browsers
    o Fixed tcp_scan problem with slow responding hosts
    o Downgraded sgi_fam vulnerability from Yellow to Brown
    o Fixed false positives in certain printers (Jet Direct, Lexmark)


26 June 2002 (SARA-3.6.2)
    o Fixed problem with CSS tutorial that corrupted other tutorials
    o Fixed AYT tutorial pointer
    o Add service name to "SARA found on non-standard port" 
    o Fixed false positive for F-Secure ssh
    o Added test for new Apache vulnerabilities
    o Updated ReportWriter to support importing to OpenOffice 
    o Fixed false positive  on YaBB Web exploit.
    o Added test for OpenSSH challenge-response vulnerability

1 June 2002 (SARA-3.6.1)
    o Added support for MAC OS X (IE browser only)
    o Updated check for MSSQL for heap/stack overflow
    o Added test for SSH Configuration Overriding Vulnerability
    o Minor fixes to http.sara and tutorials
    o Fixed http PUT false positives on Tom Cat servers
    o Update portscanner (config/sara.cf) to find more backdoors
    o Minor fix on tutorials
    o Properly report a blank report in ReportWriter

30 April 2002 (SARA-3.5.6)
    o Added Exim MTA pipe command execution
    o Added test for Cisco Catalyst 
    o Added test for Tektronix backdoor
    o Added test for Yabb unauthorized access
    o Added test for IIS/MSSQL and IIS/PHP vulnerabilities 
    o Added test for vulnerable Lotus Domino servers 
    o Improved test for vulnerable telnetd using AYT 
    o Changed -O to -x switch (hosts to be excluded)
    o Added -X filename to identify file of excluded hosts
    o Added warning for Cross Site Scripting(CSS) weaknesses (tutorial pending)
    o Added tests for IIS multiple vulnerabilities
    o Added configure for making SARA

5 April 2002 (SARA-3.5.5)
   o Upgraded to CVE Version 20020309
   o Upgraded test for ms-sql server
   o updated ssh.sara for new ssh vulnerabilities
   o updated apache test for new vulnerabilities
   o added test for Netware Remote Manager vulnerability

7 March 2002 (SARA-3.5.4)
   o Set default from SANS-20 to full reporting
   o Updated  ftp.sara for latest ftp issues
   o Update test for bnc chat bots (extreme only)
   o fixed bug in nfs-chk.sara
   o Adjusted parameters for better 'thru firewall' operation
   o Developed test for rsyncd vulnerability.
   o Fixed sanity checking in http.sara
   o Added -R switch to enable rules/timing

21 January 2002 (SARA-3.5.3)
   o Added test for uPnP.
   o upgraded test for X access control from YELLOW to RED.
   o Added alpha tools for SARA Support Scan agent.
   o Fixed minor problem with http.sara.
   o Check for Exim (Sendmail replacement) vulnerabilities.
   o Test for CDE dtspcd vulnerability.
