1999 in vulnerabilities: a year-end review
Looking back at the year's CERT advisories and Bugtraq archive. The pattern is clearer than any individual advisory: the same classes of bug, in different software, on a steady drumbeat. The structural lessons are worth pulling out.