General

New cxs v2.28

Changes:

  • Fixed problem with cxs Watch daemon restart introduced in v2.2.27. You will have to manually restart any running cxs Watch daemon after this upgrade
  • If BSD::Resource perl module is installed, double the configured process stack size to help avoid Segmentation Faults
  • Exploit regex definitions database additions
  • Exploit fingerprint definitions database additions

New cxs v2.27

Changes:

  • New –options [P]. This option will search standard web application configuration files for MySQL database passwords. It will then attempt to login via FTP on localhost with the username of the account being processed and the detected password (it will attempt up to two password hits per configuration file). If the login is successful, the option will trigger a match. See CLI documentation for more info
  • Separated and highlighted advanced Exploit Scan options in the UI that can affect user data and/or produce false-positives in the vain hope it will stop some people just ticking everything and then wondering where their files have gone
  • Added Net::FTP to the perl module requirements (this is a core perl module so should already be installed)
  • New options –uidmin [uid] and –uidmax [uid] for the GENERIC install when used with –allusers. These have no effect on cPanel and DA
  • Exploit regex definitions database additions
  • Exploit fingerprint definitions database additions

New cxs v2.26

Changes:

  • Added new option for –xtra [file]: regfile: which is a regular expression match for a file or directory name
  • Added new CLI option –smtp. This will send emails generated by –mail [email] via localhost SMTP instead of sendmail
  • Added MIME::Base64 and Net::SMTP to the perl module requirements (both are core perl modules so should already be installed)

New cxs v2.25

Changes:

  • Fix for UI version processing issue

New cxs v2.24

Changes:

  • Allow binary submissions via –wttw
  • Improvements to –decode ([D]) option
  • Exploit regex definitions database additions
  • Exploit fingerprint definitions database additions

New csf v5.36

Changes:

  • Fix for the lfd child lock mechanism effectiveness

New csf v5.35

Changes:

  • Added new BETA feature – Port/IP address Redirection. This feature uses the file /etc/csf/csf.redirect to redirect connections from/to IP/port combinations to alternative IP/ports. See readme.txt for more information
  • Updated syslog daemon checking in Server Report
  • Set PT_DELETED to 0 by default on new installations
  • Improvements to csf startup locking within lfd
  • Improvements to error trapping between csf and lfd
  • Check minimum values for interval settings and set to recommended values if too low during lfd startup to improve stability
  • Added lfd child locks to improve stability due too server or network resource issues or too low an interval setting
  • Updated Sanity Checks for settings
  • lfd will now not start if TESTING is enabled
  • Do not require write permissions to /etc/crontab when no changes required for TESTING mode enable/disable
  • Prevent parricide by lfd children unless required
  • Added nat table check in csf
  • Fixed bug in csf –grep not matching the nat table

New cxs v2.23

Changes:

  • Improved cxs Watch daemon scanning to include moved files to detect files uploaded by the cPanel File Manager
  • Fixed bug where –cleanlog [file] was not logging the filename for cxsftp.sh scanning
  • Exploit regex definitions database additions
  • Exploit fingerprint definitions database additions

New cxs v2.22

Changes:

  • Exploit regex definitions database correction

New cxs v2.21

Changes:

  • Speedups to –decode ([D]) option
  • Improvements to decode regex
  • Exploit regex definitions database additions
  • Exploit fingerprint definitions database additions