Brute forcing sshd, gaining a non-privileged user shell on any sshd
configured above 1024:
http://www.securitytube.net/video/1641

Once we have a nice user shell, we can gain root:
Here's the most recent linux kernel exploit:
http://securitytube.net/video/1642

Disclaimer: All exploit education is intended for lab demonstration for the
purposes of education.  We do not recommend you try this at home.

WE DO RECOMMEND that all Linux Administrators out there TURN OFF SSHD or SSH
Servers and ONLY use VPN's.
-- 
(503) 754-4452 iPhone
(623) 239-3392 Skype
(623) 688-3392 Google Voice

 http://www.obnosis.com

Senior Systems Administrator
IncentiveLogic,com

*Catch My  IP CAM Surveillance
Presentation @ ABLEConf.com in April!*