Apache 2.0 vs IIS 6.0 comparitive security analysis

[pmjdebruijn]

Hi,

I'm trying to do a comparitive analysis about Apache 2.0 versus IIS 6.0 regarding security.

Apache has a nice list regarding all vulnerabilities:
http://www.apacheweek.com/features/security-20

But I can seem to be able to obtain any good (and complete) vulnerability list from anywhere... Maybe my searching was lacking...

I know, http://cve.mitre.org/ and http://www.cert.org/, but the problem there is that the search function are not really reliable, as the search for 'apache 2.0' only returned 8 results... (this result is obviously invalidated through the mentioned list above).

I'd appreciate any help...

Thanks in advance,
Pascal de Bruijn