As with e-mail, data sent from a Web browser to a Web server may pass through many interconnecting computers and networks before reaching its final destination. Users should be aware that the privacy of personal or valuable information sent using a Web page entry cannot be assured. Web servers are vulnerable to threats, especially to malicious threats. Web servers can be attacked directly, or they can be used as jumping off points to attack an organization's internal networks. Organizations should examine the underlying operating system of their Web server, the Web server software, server scripts and other software for vulnerabilities.
Many organizations now support an external Web site describing their products and services.
For security reasons, these servers are usually posted outside the organization's firewall. The offerings of Web sites range from simple notices to carefully developed and designed marketing vehicles. Organizations may spend a considerable amount of money and effort in developing a Web site that is informational, easily accessible to users, and creates the right company logo or style. This effort is focused on making the Web site a component of the organization's image and reputation. These attackers exploited weaknesses in the base operating systems on which the Web servers ran, and broke into the sites with apparent ease.