Case Study: Yahoo
Site possibly compromised via a known web server hole in Apache. (General consensus)
Yahoo uses a web server based on apache, but varied off to handle its needs more exactly. Over time security problems were found and fixed in apache, but not propagated back to Yahoo.
The site compromised was running a PC-based Unix (FreeBSD) which made overflow code easier to build.