Apache Tomcat for Windows backdoor account
Published:		09.11.2009
Source:		BUGTRAQ
SecurityVulns ID:		10389
Type:		remote
Level:		6/10
Description:		admin account with empty password is created during installation.

Affected:		APACHE : Tomcat 5.5
		APACHE : Tomcat 6.0
CVE:		CVE-2009-3548 (The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a blank default password for the administrative user, which allows remote attackers to gain privileges.)

Original document

APACHE, [SECURITY] CVE-2009-3548 Apache Tomcat Windows Installer insecure default administrative password (09.11.2009)

Discuss:

Read or add your comments to this news (0 comments)