Zend.Server.Java.Bridge.Code.Execution

Description

This indicates an attack attempt against a code execution vulnerability in Zend Server Java Bridge.
The vulnerability is caused by an error where the vulnerable software does not require authentication to handle java code within the java virtual machine. It allows a remote attacker to execute arbitrary code via sending crafted data.

Affected Products

Zend Java Bridge v3.1 component of the Zend Server framework

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply patch, available from the web site.
http://www.zend.com/en/products/server/downloads

References