Description
The Filesys::SmbClientParser module 2.7 and earlier for Perl allows remote SMB servers to execute arbitrary code via a folder name containing shell metacharacters.
Affected products
- alain_barbet / filesys_smbclientparser2.1 – 2.1
- alain_barbet / filesys_smbclientparser2.2 – 2.2
- alain_barbet / filesys_smbclientparser2.3 – 2.3
- alain_barbet / filesys_smbclientparser2.4 – 2.4
- alain_barbet / filesys_smbclientparser2.5 – 2.5
- alain_barbet / filesys_smbclientparser2.6 – 2.6
- alain_barbet / filesys_smbclientparser2.7 – 2.7