How the Apache worm could have been prevented

ZDNet’s AnchorDesk has an opinion. “So who’s to blame? On the one hand, ISS jumped the gun. It should have notified only Apache, then waited for its response before going public. But, on the other hand, ISS did a service by exposing a zero-day exploit — those that take advantage of vulnerabilities known only to malicious users, not the general public — and preventing a sneak attack.”