Nmap 4.22SOC3 Released!

[Fyodor <fyodor () insecure org>]

Hi Everyone,

The SoC program is almost over (ends on Monday) and we have a lot of
great stuff to show for it!  As further demonstration of that, I am
pleased to release Nmap 4.22SOC3.  Perhaps the coolest change is that
this release ships UMIT for Windows (as well as UNIX like the last
release).  Only the self-installer contains Umit, as I'm guessing that
people who choose the .zip are more command-line oriented.

Please give Umit a spin on Windows or Unix and report any problems or
ideas you have to the nmap-dev list and/or the Umit bugtracker!  It is
very important that we get Umit into shape to make a great first
impression when it is included in the next stable Nmap.  While it does
have some bugs, I've played with it a bit today and am quite impressed
with its capabilities.  It certainly blows NmapFE away on many, many
levels!

While UMIT is awesome, I don't want to shortchange any of the other
great advancements in this release.  We've got 4 new NSE scripts, all
of your 2nd quarter version detection fingerprints integrated, raw IP
packet support for NSE, and much more!

It is particularly important that you guys test this release
extensively as we only have the full-time efforts of the SoC
participants for a few more days!

Here are the goods in the usual formats:

http://download.insecure.org/nmap/dist/nmap-4.22SOC3.tar.bz2
http://download.insecure.org/nmap/dist/nmap-4.22SOC3-setup.exe
http://download.insecure.org/nmap/dist/nmap-4.22SOC3-win32.zip
http://download.insecure.org/nmap/dist/nmap-4.22SOC3-1.src.rpm
http://download.insecure.org/nmap/dist/nmap-4.22SOC3-1.i386.rpm
http://download.insecure.org/nmap/dist/nmap-frontend-4.22SOC3-1.i386.rpm
http://download.insecure.org/nmap/dist/nmap-4.22SOC3-1.x86_64.rpm
http://download.insecure.org/nmap/dist/nmap-frontend-4.22SOC3-1.x86_64.rpm
http://download.insecure.org/nmap/dist/nmap-4.22SOC3.tgz

Here is a detailed list of the most important changes since 4.22SOC2:

o Umit is now included in the Nmap Windows executable installer.
  Please give it a try and let us know what you think!  Kris put a lot
  of work into getting this set up.

o Added four new NSE scripts: HTTP proxy detection (Arturo 'Buanzo'
  Busleiman), DNS zone transfer attempt (Eddie), detecting SQL
  injection vulnerabilities on web sites (Eddie), and fetching and
  displaying portions of /robots.txt from web servers (Eddie).

o All of your 2nd Quarter 2007 Nmap version detection fingerprints
  were integrated by Doug.  The DB now contains 4,347 signatures for
  439 service protocols.  Doug describes the highlights (craziest
  services found) in his integration report at
  http://hcsw.org/blog.pl/29 .

o NSE now supports raw IP packet sending and receiving thanks to a
  patch from Marek Majkowski.  Diman handled testing and applied the
  patch.

o Nmap now has Snprintf() and Vsnprintf() as safer alternatives to the
  standard version.  The problem is that the Windows version of these
  functions (_snprintf, _vsnprintf) doesn't properly terminate strings
  when it has to truncate them.  These wrappers ensure that the string
  written is always truncated.  Thanks to Kris for doing the work.

o Upgraded libpcre from version 6.7 to 7.2 [Kris]

o Merged various Umit bug fixes from SouceForge trunk: "missing import
  webbrowser on umit", "Missing markup in 'OS Class' on
  HostDetailsPage", "some command line options are now working
  (target, profile, verbose, open result file and run an nmap
  command)", "removing unused functions import from os.path",
  "verbosity works on command line"

o Eddie fixed several Umit bugs.  Umit now sets the file save
  extension to .usr unless the user specifies something else. The
  details highlight regex was improved, and nn error message was added
  when no target was specified and -iR and -iL aren't used.

o reason.cc/reason.h renamed to portreasons.cc/.h because a reason.h
  in the Windows platform SDK was causing conflicts. [Kris]

o Fixed a bug in --iflist which would lead to crashes.  Thanks to
  Michael Lawler for the report, and Eddie for the fix.

o Finished updating Winpcap to 4.01 (a few static libraries were
  missed) [ Eddie ]

o Added NSE support for buffered data reads. [Stoiko]

o Added new --script-args option for passing arguments to NSE scripts
  [Stoiko]

o Performed a bunch of OS fingerprint text canonicalization thanks to
  reports of dozens of capitalization inconsistencies from Suicidal Bob.

o Fixed an assertion failure which could be experienced when script
  scan was requested without also requesting version scan. [Stoiko]

o Fixed an output bug on systems like Windows which return -1 when
  vsnprintf is passed a too-small buffer rather than returning the
  size needed.  Thanks to jah (jah(a)zadkiel.plus.com) for the report.

o Added sys/types.h include to portreasons.h to help OpenBSD compilation.  
  Thanks to Olivier Meyer for the patch.

o Many hardcoded function names and instances of __FUNCTION__ were
  changed to __func__ [Kris]

o Configure scripts for Nmap, Nbase, and Nsock were optimized to
  remove redundant checks.  This improves compilation time
  performance. [Eddie]

o Updated IANA assignment IP list for random IP (-iR)
  generation. [Kris]

Enjoy!
Fyodor

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org