Server Implementation
Most Web servers, from most vendors, have had bugs.
- Always apply patches as they are released.
- The servers try to validate source addresses; check passwords; parse file names; implement access restrictions; switch uids (which means they must run as root); etc.
But don’t be too quick to install the newest version; new code is often buggy.