Debian's something I checked when I first started seeing this, and their default config is not vulnerable. Being able tod this via localhost is not a problem,

Debian's something I checked when I first started seeing this, and their default config is not vulnerable. Being able tod this via localhost is not a problem, it's when it's open to the internet.