cPanel

Changes:

• Removed spurious “set to skip” message text
• Added ” (Hits:nn)” to the Subject line of email reports
• Added new option –ulist [file] for use with the –all option to perform scans of only those users listed in [file]
• Regex scanning improvements
• Disable default deep scanning on FTP and web script uploads to help avoid false-positives. If you want to continue deep scanning add –deep to cxsftp.sh and/or cxscgi.sh
• Exploit regex definitions database additions
• Exploit fingerprint definitions database additions

Changes:

• Added breakout if –decode [file] depth is > 250 to prevent looping
• Fixed problem with quarantine UI to cope with a trailing slash on the –quarantine [dir] statement
• Improved detection of the quarantine directory in UI
• Added DNS lookups on FTP IP address reports
• Allow the use of floating point numbers with –throttle [num]
• Added “Ignore” option for FTP quarantines files to Quarantine UI to add a file: ignore statement to a relevant ignore file if configured
• Added new options –jumpfrom [user] and –jumpto [user] for use with the –all option to perform scans of only those user between the two points, both of which are inclusive
• Added jumpfrom and jumpto to UI resource choice
• Exploit regex definitions database additions
• Exploit fingerprint definitions database additions

Changes:

• Added new experimental options –decode [file] and –depth [num]. See the perldoc documentation for more information
• Exploit regex definitions database additions
• Exploit fingerprint definitions database additions

Changes:

• Modified FrontPage extensions check to be case-insensitive
• Use of –all –mail [email] and –nosummary will now only report suspicious accounts instead of all accounts. –report [file] will still contain the full report
• Updated cxs perldoc help
• Exploit regex definitions database additions
• Exploit fingerprint definitions database additions

Changes:

• New option (-X, –xtra [file]) to allow custom regular expression matches and filenames that cxs will additionally scan for
• Exploit fingerprint definitions database additions