1944108 - Tomcat backdoor worm exploits weak authentication

Symantec has recently posted an article regarding Tomcat worm threats.  

Symantec has discovered a new back door worm-type threat which targets servers running Apache Tomcat. This threat is a little different from the ones we usually encounter every day.

Back door type Trojan horses and worms let attackers execute various commands on compromised computers and essentially enable the attacker to control a computer remotely. This means that important information can be stolen from the user and their computer could be used to attack other victims.

Servers with Tomcat running

KBA , BI-BIP-DEP , Webapp Deployment, Networking, Vulnerabilities, Webservices , How To