It depends on what country the person is in, what country the server he's distributing the script from is in, and whether the script can be proven to have malicious intentions (a program which simply gives remote access to another computer is not necessarily illegal in and of itself).
