The Filesys::SmbClientParser module 2.7 and earlier for Perl allows remote SMB servers to execute arbitrary code via a folder name containing shell metacharacters.
https://exchange.xforce.ibmcloud.com/vulnerabilities/43910
http://www.securityfocus.com/bid/30290
http://www.securityfocus.com/archive/1/494536/100/0/threaded