It's possible to execute any code via local zone scripting.
vulners.com/securityvulns/securityvulns:doc:6199
vulners.com/securityvulns/securityvulns:doc:6200