The remote host is missing an update to the system as announced in the referenced advisory.

Update your system with the appropriate patches or software upgrades. https://www.sec-consult.com/files/20120626-0_zend_framework_xxe_injection.txt http://framework.zend.com/security/advisory/ZF2012-01 http://framework.zend.com/security/advisory/ZF2012-02 http://www.openwall.com/lists/oss-security/2012/06/26/2 https://secunia.com/advisories/49665/ http://www.vuxml.org/freebsd/ec34d0c2-1799-11e2-b4ab-000c29033c32.html

The following package is affected: ZendFramework