News for hackers. Stuff that matters.

A comment on Inside Shellshock: How hackers are using it to exploit systems. Parent comment

Re:Inside Shellshock: How hackers are using it to exploit sy... by brians on Wednesday October 01, 2014 @12:45AM (#8392877)
Some FastCGI frameworks helpfully set up environment variables in the web app---you know, just in case you run a sub-process and want it to work the same way it would have from a CGI.

See Per-Request Environment Variables at http://www.fastcgi.com/devkit/doc/fastcgi-prog-guide/ch1intr...

These aren't ubiquitous---but it also isn't just CGI programs that expose this vulnerability.

[ Parent | on HN ]

There are no comments on this comment yet.