So, to test, they want their CGI put where it will execute in the webroot. And, if you didn't have cgis that were vulnerable before, now anyone can root your ma

So, to test, they want their CGI put where it will execute in the webroot. And, if you didn't have cgis that were vulnerable before, now anyone can root your machine. So, if your bash is ok, you're ok. But if your bash is bad, now it's a race to patch properly before someone else gets it.