linux vserver 2.6 prior to 2.6.17 suffers from privilege escalation in remount code.
linux-vserver linux-vserver