Description
A design flaw in the Z-Modem protocol allows the remote sender of a file to execute arbitrary programs on the client, as implemented in rz in the rzsz module of FreeBSD before 2.1.5, and possibly other programs.
References
- rzsz-command-execution(7540) vdb-entry
- G-31 third-party-advisory government-resource