Grabbed the source for cgic and dropped an executable into the cgi-bin directory… everything worked very easily. But what are the security concerns of running executables from the cgi-bin? I presume they are the same as running scripts from there, with the added overhead of being more cautious about array length…
As a java developer, we tend not to worry about this type of exploit very much. Even though it still applies.
