SecureCRT 4.0, 4.1, and possibly other versions, allows remote attackers to execute arbitrary commands via a telnet:// URL that uses the /F option to specify a configuration file on a samba share.
https://exchange.xforce.ibmcloud.com/vulnerabilities/18201
http://www.securityfocus.com/bid/11731