
15 December 2003 (SARA 5.0.0)
    o Fixed compiling problem with dscan.c with MAC OS X
    o Fixed false positive switching when text has a "/" (htm)
    o Fixed false positive switching back to true vuln (htm)
    o Fixed problem with total host color counts (xml)
    o Fixed various format problems in htm.pl
    o Updated http.sara5 to generate proper headers for mod_security
    o Updated http.sara5 to reflect dysfunctional web servers
    o Changed Analysis and Reporting screens to:
      a. Dislay Windows Domain (if applicable)
      b. Display all well known services
      c. Display vulnerabilities and false positives
      d. Change vulnerability to false positive and the reverse
    o Changed ReportWriter:
      a. Default mode is to generate reports (-r turns it off)
      b. Added Windows Domain
      c. Added Class to vulnerability listings
      d. Added CVE to vulnerability listing
      e. Improved and updated SANS Top 20 generation
      f. Made reports configurable (config/xml.cf, config/htm.cf)
      g. Format of report.csv has been altered dramatically.
      h. Format of report.xml has been modified slightly
      i. Format of report.html has been modified.
    o Changing many of the tutorials and formats
    o Added SARA Overview briefing
    o Status files will be tied to the database (e.g., status-mytest)

27 October 2003 (SARA-4.2.7)
    o Updated to comply with SANS-20 V4
    o Continued updates to new reportwriter
    o Fixed account lockout problem in smb.sara
    o Added Netbios Domain to database and reports
    o Added definitive test for ms-043 vulnerability

29 September 2003 (SARA-4.2.6)
    o Upgraded ssh.sara to check version IAW CA-2003-24
    o Upgraded sendmail.sara to check version IAW CA-2003-25
    o Upgraded http.sara5 to check Apache version IAW with TBD CA


12 September 2003 (SARA-4.2.5c)
    o updated dscan to handle ms 039 vulnerability and patch

16 August 2003 SARA-4.2.5b
    o Added definitive test for ms-rpc (non destructive)
    o Alpha version of new xml/csv/htm generator
    o Added subnet tags for xml output
    o Minor fixes throughout
    o Improved WebDAV exploit test (wd.pl)

18 July 2003 (SARA-4.2.1e)
    o Tweaked NMAP processing
    o Fixed race problem with t2r (samba exploit)
    o Fixed problem with smb.sara and user accounts
    o Fixed problem with http.sara5
    o Fixed problem with standard reports and cert advisories
    o Fixed race problem with perl/contrib/wd.pl
    o Added port check for Microsoft RPC services (CA-2003-16)
    o Added test for Microsoft backdoor (svchost)


20 June 2003 (SARA-4.2.1)
    o Updated to CVE Version 20030402
    o Fixed problem with walld in rules/facts
    o Added version test for sendmail vulnerability (many false positives)
    o Downgraded Netware Remote Manager to a Brown
    o Provided 50 % speed enhancement to bin/depends.sara
    o Provided a 30 % speed enhancement to smb.sara
    o Integrated samba-tng for improved registry and null session enumeration
    o Added password guessing and user enumeration to smb.sara.
    o Added registry.sara to evaluate software version and correctness
    o Corrected problem with ssh.sara
    o Added definitive test for vulnerable x86 Samba servers 
    o Added definitive test for vulnerable IIS/WebDav servers
    o Added test for vulnerable Sun One servers [CVE-2002-0846]
    o Added md5 integrity check for distribution

13 February 2003 (SARA-4.1.4)
    o More (last?) xml fixes
    o Enabled tooltalk event for Solaris 7 and 8.
    o Updated open share alert to include account info
    o Added CERT advisories for several vulnerabilities
    o Added definitive test for MSSQL Worm (-a3 and above)
    o Added pause feature through ./sara-pause file
    o Changed xml and csv to include Green/Grey hosts
    o Added xfs (font server) test
    o Added cachefs advisory
    o Added rpc.walld advisory
    o Made cosmetic changes to SSS
