28 December 1999 (SARA 2.1.4)

  o Fixed trailing blank problem in -F filename
  o Fixed bug in firewall enabling logic

15 December 1999 (SARA 2.1.3)

  o Added test for trinoo
  o Added test for sadmind exploit
  o Added test for Hack a Tack
  o Corrected pop3 to find obscure Qualcomm configurations
  o Added a post analysis filter, ammends (SARA-Pro only)

30 November 1999 (SARA 2.1.2)

  o Added "-F hostfile" to scan a list of hosts (not subnets)
  o Added custom attack level (level=4)
  o Added submask control for subnet scanning (command line only)
  o Added test for /tmp/bob exploit (ingreslock and pcserver)
  o Added test for DRAT exploit
  o Added test for vulnerable DNS Servers (NXT records)
  o Added many CGI vulnerability tests
  o Added subnet mask to command line arguments (/16 through /32)
  o Made NMAP non-default (problems with most OSs)

 
7 November 1999 (SARA 2.0.10)

   o Attempt at getting a single makefile for linux
   o Corrected sendmail.sara for false positive on Sun 

20 September 1999 (SARA 2.0.9)

   o Upgraded tooltalk and calendar manager to RED
   o Corrected problem in login.sara 
   o Corrected problem in relay.sara
   o Updated sendmail.saara
   o Updated ftp.sara

7 July 1999 (SARA 2.0.8)

   o Added test for calendar manager (rpc.cmsd)[bin/rpc.sara, rules/facts]
   o fixed ssh.sara where we get not response
   o Added tutorials for tooltalk and rpc.cmsd
   o Added check for open administrator account on smb [partial]
   o Fixed login.sara to minimize false positives

15 June 1999 (SARA 2.0.7)

   o Corrected (linux) for newer versions of Linux
   o Created new entry for older versions of Linux (olderlinux)

30 May 1999 (SARA 2.0.6)

   o Fixed NMAP and SAMBA detection
   o Fixed GREEN FTP when there re vulnerabilities
   o Fixed false alarm on relay.sara for certain Sun systems

19 May 1999 (SARA 2.0.5)

   o Fixed to compile under Red Hat 6.0
   o Fixed bug in login.sara

18 May 1999 (SARA 2.0.4)

   o Added ftp bounce test
   o Addedd mail relay test
   o Improved login.sara
   o Improved timeouts for various tests
   o improved http.sara tests

5 May 1999 (SARA 2.0.3)

   o Updated ftp.sara to detect corrected versions of wu-ftpd.  We
     assume that all wu-ftpd servers made in 1999 or later are OK.

   o Updated http.sara to detect certain IIS and ColdFusion exploits.
     This is experimental code.  Any problems should be reported to
     sara@arc.com

   o Updated "cgi access" tutorial to address FrontPage, IIS, and
     ColdFusion exploits.

   o Added "snmpd" tutorial to address SNMP warnings.


