[EGreg]

This requires an SSH to be available?

Is it possible to pwn without SSH listening?

[fragmede]

*NFS

[bink]

One of the exploits writes a public key to the authorized_keys file, so it does require SSH be open as well.