Re: Microsoft IIS security update ms08-006 looks critical to me

[David Shettler <dshettle () HOLYCROSS EDU>]

Given that the vector is not disclosed (never is), it could be such
that the complexity of executing an exploit against said vulnerability
is not conducive to automated propagation.  Without knowing the full
details it is difficult to judge.

Based on the information provided I agree with your position, however.

Dave Shettler
ITS, College of the Holy Cross
Lead Dev. OSVDB