An organization should have clear, workable, and enforceable Web usage and security policies. Monetary and credit damage by theft of service, nonpayment, credit card fraud, etc. Privacy can be compromised when the organization's or its customers' confidential information is exposed. Theoretically, since the source code was available for most of the servers, the errors should have been immediately spotted by the Internet users who downloaded the code. Practically, however, most users download a binary executable and never look at the source code, or merely give it a cursory look before compiling and installing it.
Users assume that someone more conscientious than themselves has carefully studied the code.
There are several problems with this method. As described above, Internet addresses and domain names are a weak identification method. Also, unless you can configure an attack computer with various addresses, it is difficult to tell if your configuration rules are correct or if the Web server author implemented the access control algorithms correctly. Web servers support dozens of optional features. The most popular features are usually the best debugged, since other people have already discovered the problems.