Unrated severityNVD Advisory· Published Jul 16, 1996· Updated Jun 16, 2026

CVE-1999-1301

Description

A design flaw in the Z-Modem protocol allows the remote sender of a file to execute arbitrary programs on the client, as implemented in rz in the rzsz module of FreeBSD before 2.1.5, and possibly other programs.

Affected products

FreeBSD/FreeBSD
cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*
Range: <=2.1.5
FreeBSD/rzszllm-fuzzy
Range: <2.1.5

Patches

Vulnerability mechanics

References

ftp.freebsd.org/pub/FreeBSD/CERT/advisories/old/FreeBSD-SA-96:17.rzsz.ascnvdPatchVendor Advisory
ciac.llnl.gov/ciac/bulletins/g-31.shtmlnvdPatchVendor Advisory
www.iss.net/security_center/static/7540.phpnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000