server server ip (+cgi page if needed) folder where exploit will write (or none but can be the mess, for better test need to add rights) and some more options (like the exploit file name and ext to be ...

We just tested this and it seems to work, resulting in a bash shell as the apache user. My Debian-based servers don’t seem to be vulnerable because they run their CGI scripts (and DHCP scripts) using ...