ZDI-11-113: Zend Server Java Bridge Design Flaw Remote Code Execution Vulnerability

ZDI-11-113: Zend Server Java Bridge Design Flaw Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-113 March 28, 2011 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Zend -- Affected Products: Zend Zend Server -- TippingPointTM IPS Customer...

Zend Server code execution

It's possible to execute user-supplied code via Java Bridge TCP/10001 service...

Zend Server Java Bridge Design Flaw Remote Code Execution

This module abuses a flaw in the Zend Java Bridge Component of the Zend Server Framework. By sending a specially crafted packet, an attacker may be able to execute arbitrary code. NOTE: This module has only been tested with the Win32 build of the software. Module Options msf use...

Zend Server Java Bridge Arbitrary Java Code Execution

This module takes advantage of a trust relationship issue within the Zend Server Java Bridge. The Java Bridge is responsible for handling interactions between PHP and Java code within Zend Server. When Java code is encountered Zend Server communicates with the Java Bridge. The Java Bridge then...

Zend Server Java Bridge Design Flaw Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Zend Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Zend Java Bridge v3.1 component of the Zend Server framework. The javamw.jar service...

Java Bridge 5.5 Directory Traversal

/Title: PHP/Java Bridge 5.5 Date : Sep 6, 2010 Author: Saxtor Location: South America Guyana Email: [email protected] Category:: Web Applications Verison: 5.5 suffers a directory traversal vulnerability. This vulnerability could allow attackers to read arbitrary files =...

java Bridge 5.5 - Directory Traversal

java Bridge 5.5 - Directory Traversal /Title: PHP/Java Bridge 5.5 Date : Sep 6, 2010 Author: Saxtor Location: South America Guyana Email: [email protected] Category:: Web Applications Verison: 5.5 suffers a directory traversal vulnerability. This vulnerability could allow attackers to read...

Java Bridge v. 5.5 Directory Traversal Vulnerability

Exploit for php platform in category web applications ==================================================== Java Bridge v. 5.5 Directory Traversal Vulnerability ==================================================== /Title: PHP/Java Bridge 5.5 Date : Sep 6, 2010 Author: Saxtor Location: South Americ...

java Bridge 5.5 - Directory Traversal

/Title: PHP/Java Bridge 5.5 Date : Sep 6, 2010 Author: Saxtor Location: South America Guyana Email: [email protected] Category:: Web Applications Verison: 5.5 suffers a directory traversal vulnerability. This vulnerability could allow attackers to read arbitrary files =...