LCA: Lessons from 30 years of Sendmail

Of course buffer overflows are most of the security holes we've had in sendmail. BIND seems to be about evenly divided between that and DoS attacks (and I defy you to find a language that can avoid *those*.)