Thanks. I am patched for shellshock. The 200 return code through me off.


  Original Message  
From: Reinis Rozitis
Sent: Saturday, July 30, 2016 12:21 PM
To: nginx@nginx.org
Reply To: nginx@nginx.org
Subject: Re: Bash script; Was it executed?

> I see a return code of 200. Does that mean this script was executed?

The return code is for GET request on /.
Unless you have an index page that "executes" (typically cgi) referer or
browser useragent.

It seems as an bash vulnerabilty (known as shellshock CVE-2014-6271)
attempt.

rr

_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx

_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx