The Filesys::SmbClientParser module 2.7 and earlier for Perl allows remote SMB servers to execute arbitrary code via a folder name containing shell metacharacters.
| Software | From | Fixed in |
|---|---|---|
| alain_barbet / filesys_smbclientparser | 2.1 | 2.1.x |
| alain_barbet / filesys_smbclientparser | 2.2 | 2.2.x |
| alain_barbet / filesys_smbclientparser | 2.3 | 2.3.x |
| alain_barbet / filesys_smbclientparser | 2.4 | 2.4.x |
| alain_barbet / filesys_smbclientparser | 2.5 | 2.5.x |
| alain_barbet / filesys_smbclientparser | 2.6 | 2.6.x |
| alain_barbet / filesys_smbclientparser | 2.7 | 2.7.x |