|Main Archive Page > Month Archives > webappsec archives|
On 26/01/2008, Robert Hajime Lanning <firstname.lastname@example.org> wrote:
> If you are using virtual hosting for the website, then it is an issue with
> the virtual host name matching.
> So, with apache:
> servername www.site.com
> serveralias site.com site.com. www.site.com.
As it was small business server I assume that it was IIS, I don't know what the DNS was, I ended up on the site by accident, a double mistype of the url and the extra dot on the end so the site isn't mine and I can't test it or talk to the real owner.
I didn't realise that an extra dot on the end was a valid domainname until this. It is definitely an extra check I'll be making on my audits from now on.