I hadn't seen this posted yet.... one of the kernels affected is Linux Kernel 2.4.22 which came with my version of RedHat 9.

Proof of Concept: http://www.derkeiler.com/Mailing-Lis...3-12/0017.html

more information: http://isec.pl/vulnerabilities/isec-0012-do_brk.txt

the exploit: http://www.k-otik.net/exploits/12.02.brk_poc.asm.php

And: http://core.geekheim.de/archives/000515.html

/me skips away singing "a patchin I will go...

EDIT: I did find a paper where this has been seen in the wild, but I can't remember where I found it... DOH!

Found it: https://utils.its.caltech.edu/piperm...03/000000.html