url suffix question

[Stephen Allen]

Peter L. Peres wrote:

> On Mon, 27 Oct 2003, Stephen Allen wrote:
> 
> 
>>Has anyone seen a requested url in their web server logs that ends with a " ."?
>>That's a space and a period. I cannot seeing it being a mistype as it was logged
>>several times.
>>
>>Is this an attempt at an exploit of some kind?
> 
> 
> It could be an exploit if given to a script (cgi). . represents the
> current working directory. Depending on what the server does it might pass
> . as an argument to the script. This may or may not cause trouble.
> 
> Otoh, it has happened to me to cut & paste a url from text complete with
> ending dot, which was offset by a space from the url text (and sometimes
> not offset).

Yeah, I was thinking the latter at first, but am unsure, when I see it multiple 
times in the log. Thanks for the input.


-- 
Best Regards,

Steve

--
The Toronto Linux Users Group.      Meetings: http://tlug.ss.org
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml