Mike Howard has posted some examples of buffer overflows by incorrect use of "safe" string functions. It's an enjoyable exercise- take a look here!

Greg