Yeah in the time of Bugtraq (long before Metasploit) you'd have to fix intentionally slightly broken exploits (e.g. C code or Perl) which was done to avoid scriptkiddies. Nowadays there's an entire OS full with an arsenal of weapons.