Re:CVE-2014-6271: Remote code execution through bash
by rmc on Wednesday September 24, 2014 @01:18PM
(#8362711)
Are you saying that if you don't have a web server that allows "get" requests (only posts) then this exploit is not an issue at all?
Usually no. This exploit should be vulnerable to any HTTP method. "unathenticed GETs" are the lowest security level of HTTP calls, so if they can be used as an attack vector, you should pay attention.
Usually no. This exploit should be vulnerable to any HTTP method. "unathenticed GETs" are the lowest security level of HTTP calls, so if they can be used as an attack vector, you should pay attention.