Remember the RPC vulnerabilities from ~2003? Back then, a machine connected to the Internet without some firewall in front of it would get infected before the installation routine was finished.

This one is really bad, of course, but historically, it's not the worst.