Re: malware found the tomcat 6.0.29

2012-11-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mark, On 11/27/12 4:23 AM, Mark Thomas wrote: > On 27/11/2012 07:21, Mohan Kumar G wrote: >> >> We have found the malware installed on the tomcat version 6.0.29 >> on two of the servers.The both servers have a war file >> (Tomcatmanagxesaxsas.war) t

Re: malware found the tomcat 6.0.29

2012-11-27 Thread Mark Thomas
On 27/11/2012 07:21, Mohan Kumar G wrote: > > We have found the malware installed on the tomcat version > 6.0.29 on two of the servers.The both servers have a war file > (Tomcatmanagxesaxsas.war) that installed several java script files to the > Tomcat webserver that allow for remote access over t

malware found the tomcat 6.0.29

2012-11-26 Thread Mohan Kumar G
We have found the malware installed on the tomcat version 6.0.29 on two of the servers.The both servers have a war file (Tomcatmanagxesaxsas.war) that installed several java script files to the Tomcat webserver that allow for remote access over the web. OD-VA-W-AG-87 had an additional war file (J