A Server Core installation of Windows Server 2008 is less susceptible to attacks than a full installation of Windows Server 2008. Any default installation of Windows Server 2008 is also more secure than a default installation of previous versions of Windows Server:

The firewall is on by default, is a bidirectional one and allows no inbound connections
Windows Server 2008 was developed under the security initiatives at Microsoft

Full Article