The PlRPC module possibly 0.2020 and earlier for Perl uses the Storable module which allows remote attackers to execute arbitrary code via a crafted request which is not properly handled when it is deserialized.