Guess what dickhead XP luser, the difference between this and the holes in IIS, is that Apache drops all of it's privs as soon as it starts up and IIS runs as administrator or localsystem. When apache is hacked the os in invulnerable, only web pages can be fucked with(unless the admin set it up wrong). When IIS is hacked the entire system is compromised, that is the reason nimda would wipe your entire server out.
Get a fucking clue before you start BS topics.