CVE-1999-1301 - A design flaw in the Z-Modem protocol allows the remote sender of a file to execute arbitrary programs on the client, as implemented in rz in the rzsz module of FreeBSD before 2.1.5, and possibly other programs

A design flaw in the Z-Modem protocol allows the remote sender of a file to execute arbitrary programs on the client, as implemented in rz in the rzsz module of FreeBSD before 2.1.5, and possibly other programs

Published Mar 9, 2002

No CVSS score

EPSS 1.32%

Description

A design flaw in the Z-Modem protocol allows the remote sender of a file to execute arbitrary programs on the client, as implemented in rz in the rzsz module of FreeBSD before 2.1.5, and possibly other programs.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/old/FreeBSD-SA-96:17.rzsz.asc
vendor-advisoryx_refsource_FREEBSD
http://ciac.llnl.gov/ciac/bulletins/g-31.shtml
third-party-advisorygovernment-resourcex_refsource_CIAC
http://www.iss.net/security_center/static/7540.php
vdb-entryx_refsource_XF
https://euvd.enisa.europa.eu/vulnerability/EUVD-1999-1282
Advisory

Link	Providers	Tags
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/old/FreeBSD-SA-96:17.rzsz.asc		vendor-advisoryx_refsource_FREEBSD
http://ciac.llnl.gov/ciac/bulletins/g-31.shtml		third-party-advisorygovernment-resourcex_refsource_CIAC
http://www.iss.net/security_center/static/7540.php		vdb-entryx_refsource_XF
https://euvd.enisa.europa.eu/vulnerability/EUVD-1999-1282		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 9, 2002

Updated Aug 1, 2024

Reserved Aug 31, 2001

Link CVE-1999-1301

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-1999-1301

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Mar 9, 2002

Updated Aug 1, 2024

Link EUVD-1999-1282

GitHub

No data