The Filesys::SmbClientParser module 2.7 and earlier for Perl allows remote SMB servers to execute arbitrary code via a folder name containing shell metacharacters.
- http://securityreason.com/securityalert/4027
No PoCs found on GitHub currently.