WebApp Sec: Re: extra dot on domain name gives different site

["Robert Hajime Lanning" <robert.lanning () gmail com>]

If you are using virtual hosting for the website, then it is an issue with
the virtual host name matching.

So, with apache:
servername www.site.com
serveralias site.com site.com. www.site.com.



On Jan 23, 2008 3:52 AM, Robin Wood <dninja () gmail com> wrote:
> Hi
> I've just been looking at a site and accidentally added an extra dot
> to the end of the domain name, rather than getting the site I got a MS
> small business server 2003 admin page.
>
> e.g.
> http://www.site.com gives the real site
> http://www.site.com. gives the admin page
>
> I assume that this is something to do with IIS not parsing the url
> correctly so giving the default website rather than the vhost with
> that address. Is this a known issue? I tried to google but couldn't
> think what to google for!
>
> Robin
>
> -------------------------------------------------------------------------
> Sponsored by: Watchfire
> Methodologies & Tools for Web Application Security Assessment
> With the rapid rise in the number and types of security threats, web application security assessments should be 
> considered a crucial phase in the development of any web application. What methodology should be followed? What tools 
> can accelerate the assessment process? Download this Whitepaper today!
>
> https://www.watchfire.com/securearea/whitepapers.aspx?id=70170000000940F
> -------------------------------------------------------------------------


-- 
And, did Galoka think the Ulus were too ugly to save?
                                         -Centauri

-------------------------------------------------------------------------
Sponsored by: Watchfire 
Methodologies & Tools for Web Application Security Assessment 
With the rapid rise in the number and types of security threats, web application security assessments should be 
considered a crucial phase in the development of any web application. What methodology should be followed? What tools 
can accelerate the assessment process? Download this Whitepaper today! 

https://www.watchfire.com/securearea/whitepapers.aspx?id=70170000000940F
-------------------------------------------------------------------------