3 ms·
Seriously, for an "Everything you need to know about X" post, they're very light on the details of what exactly makes a web server vulnerable.
by ninkendo 12y ago
Seriously, for an "Everything you need to know about X" post, they're very light on the details of what exactly makes a web server vulnerable.
- mhurron 12y agoIf you run CGI you may be/probably are. Honestly, I'm having trouble seeing how this is the end of the world vulnerability that it's being hyped as.
- enjo 12y agoThere are a TON Of servers out there running PHP through good ole CGI. I would imagine that some of those are running web apps that lots and lots of people use. Meaning you now have shell access to those machines. Mining username/passwords is probably going to be pretty simple. I wonder how many of these machines have credit card numbers stored in the clear? I'd bet that there's a bank somewhere running in exactly that configuration. It's a big deal.
- diminoten 12y agoThis is "end of the world" mostly because of all the "things" (a la "Internet of things") like toasters, microwaves, refrigerators, etc. all have vulnerable bash versions.