[xraystyle]

You could exploit it with remote desktop. If it's enabled on the client, you can just connect with root/no password.