[jetty-users] jetty keeps getting hacked

[Kent Tong <kent.tong.mo@xxxxxxxxx>]

Hi,

I have set up jetty-8.1.15.v20140411 on CentOS 6.5 with all the updates installed. However, jetty keeps getting hacked: malicious files (usually there is one named conf.n) are frequently created in jetty's directory (/opt/jetty). I have only enabled the minimum configuration in start.ini:

etc/jetty.xml

etc/jetty-annotations.xml

etc/jetty-ssl.xml

etc/jetty-deploy.xml

etc/jetty-contexts.xml

there is only one webapp installed which is nothing out of ordinary.

any idea? thanks in advance!

--

Kent Tong

IT author and consultant, child education coach