Check /tmp is mounted as a filesystem : WARNING /tmp should be mounted as a separate filesystem with the noexec,nosuid options set
Check /etc/cron.daily/logrotate for /tmp noexec workaround : WARNING Due to a bug in logrotate if /tmp is mounted with the noexec option, you need to have logrotate use a different temporary directory. If you don't do this syslog may not restart correctly and will write to the wrong (older) log files. See here for a way to do this
Check /var/tmp is mounted as a filesystem : WARNING /var/tmp should either be symlinked to /tmp or mounted as a filesystem
Check for cxs : WARNING You should consider using cxs to scan web script and ftp uploads and user accounts for exploits uploaded to the server
Check for kernel logger : WARNING syslogd appears to be running, but not klogd which logs kernel firewall messages to syslog. You should ensure that klogd is running
Check SSH on non-standard port : WARNING You should consider moving SSH to a non-standard port [currently:22] to evade basic SSH port scans. Don't forget to open the port in the firewall first!
Check SSH PasswordAuthentication : WARNING For ultimate SSH security, you should consider disabling PasswordAuthentication and only allow access using PubkeyAuthentication
Check apache for FrontPage : WARNING Microsoft Frontpage Extensions were EOL in 2006 and there is no support for bugs or security issues. For this reason, it should be considered a security risk to continue using them. You should rebuild apache through easyapache and deselect the option to build them