December 2009

New cxs v1.11

Changes:

  • Modified hidden image text file to exclude most FrontPage extensions files
  • Exploit regex definitions database additions
  • Exploit fingerprint definitions database additions

New csf v4.86

Changes:

  • Added Dovecot regex checking for LT_POP3D and LT_IMAPD
  • Modified Server Check for Fedora v10 EOL now that Fedora v12 has been released
  • Improved Dovecot IMAP and POP3D login failure regex
  • Ignore RELAYHOSTS setting for LT_POP3D and LT_IMAPD
  • Fixed TLSCipherSuite Server Check for proftpd
  • Added SSHD regex for “Did not receive identification string from IP” failures

New cxs v1.10

Changes:

  • Added new check to suspicious file routine to detect text files hiding as image files
  • Made file extension checks case-insensitive
  • Exploit fingerprint definitions database additions