Ran a Nessus vulnerability check against a stock Ubuntu 8.04.1 installation with a stock web server. End result was enough to cause some concern. Obviously, some lockdown still necessary.
Screen capture of output.
Lesson: don't rely on a stock Ubuntu setup. Lock it down properly.