Vulnerability scanner SAINT 7.1.3 released

SAINT offers an integration of vulnerability assessment and penetration testing tools.

New features in version 7.1.3:

  • Added support for ntlmv2 authentication.
  • SAINTwriter: Added option to have no header in reports.
  • Added $support_noframes option to allow user to skip the noframes tag for performance reasons.

New vulnerability checks in version 7.1.3:

  • Mac OS X security update 2009-005.
  • FreeRADIUS rad_decode denial of service.
  • Altiris eXpress ActiveX control file download vulnerability.
  • Excel crafted attached file code execution in Lotus Notes.
  • Symantec Altiris Deployment Solution Multiple Vulnerabilities.
  • ntop HTTP Basic Authentication NULL Pointer Dereference Denial Of Service Vulnerability.
  • Linux Kernel “udp_sendmsg()” MSG_MORE Flag Local Privilege Escalation.
  • Linux Kernel ‘cmp_ies()’ Remote Null Pointer Dereference Vulnerability.
  • Linux Kernel “net/llc/af_llc.c” Local Information Disclosure.
  • Brightmail Control Server XSS and Multiple Unpsecified Vulnerabilities.
  • Snitz Forums 2000 v3.4.7 SQL Injection vulnerability.
  • CommuniGatePro 5.2.14 Webmail Cross Site Scripting vulnerability.
  • CA Data Transport Services Buffer Overflow.
  • Google Chrome ‘Math.Random()’ Random Number Generation Vulnerability.
  • SquirrelMail Form Submissions Cross Site Request Forgery Vulnerability.
  • OpenOffice Prior to 3.1.1 Multiple Unspecified Security Vulnerabilities.
  • Cisco IOS-BGP vulnerabilities.
  • MailEnable ‘MEHTTPS.EXE’ Stack-Based Buffer Overflow Vulnerability.
  • CA Multiple Product DTScore vulnerability.
  • Drupal Cross Site Scripting (XSS) vulnerability.
  • Opera Multiple Vulnerabilities fixed in 10.00.
  • IBM WebSphere Application Server Vulnerabilities fixed in 7.0.0.5.
  • PHP-Fusion ‘downloads.php’ SQL Injection Vulnerability.
  • Novell eDirectory HTTP Request Denial of Service.
  • Cisco Unified Communications Manager Multiple Denial of Service Vulnerabilities.
  • PHP-Fusion Multiple Information Disclosure Vulnerability.
  • wp-login – Security Bypass Vulnerability in WordPress 2.8.3.
  • wp-admin Security Bypass Vulnerability in wordpress 2.8.2.
  • Multiple Vulnerabilities in wordpress 2.8.1.
  • Multiple Vulnerabilities in wordpress 2.8.0.
  • Username information disclosure in wordpress 2.7.1.
  • Horde Password module XSS vulnerability.
  • Apple QuickTime Multiple Vulnerabilities fixed in 7.6.4.
  • Linux Kernel ‘drivers/char/tty_ldisc.c’ NULL Pointer Dereference Denial of Service Vulnerability.
  • Linux Kernel Multiple Protocols Local Information Disclosure Vulnerabilities.
  • Kaspersky Antivirus & Internet Security DOS.
  • FileCOPA FTP server NOOP denial of service.
  • FtpXQ FTP server ABOR command denial of service.
  • Dnsmasq TFTP server heap overflow.
  • Zope ZODB Protocol code Execution and Authentication bypass.

New exploits in this version:

  • VideoLAN VLC Media Player SMB Module Win32AddConnection Buffer Overflow exploit.
  • Microsoft Excel BIFF format Qsir record exploit.
  • Safari WebKit floating point number exploit.
  • ACDSee TIFF file handling buffer overflow exploit.
  • Symantec Altiris Deployment Solution ActiveX control file download exploit
  • Mozilla Firefox PKCS11 Module Installation Code Execution exploit.



Share this