Vulnerability in Freebsd

CVE-1999-1301

A design flaw in the Z-Modem protocol allows the remote sender of a file to execute arbitrary programs on the client, as implemented in rz in the rzsz module of FreeBSD before 2.1.5, and possibly other programs.

EPSS: 0.013 (68.1th percentile) — read the EPSS interpretation.

Affected products

References

  • cve@mitre.org (vdb-entry, x_refsource_XF)
  • cve@mitre.org (Patch, government-resource, Vendor Advisory, third-party-advisory, x_refsource_CIAC)