The PlRPC module, possibly 0.2020 and earlier, for Perl uses the Storable module, which allows remote attackers to execute arbitrary code via a crafted request, which is not properly handled when it is deserialized.
CVSS 2.0MEDIUM 6.8·Network·No auth·Interaction —·EPSS 0.02816·Published 2014-04-29·Will not fixCWE-94