One of the files on their server is an exploit for that vulnerability. If they know about it, I would guess they aren't vulnerable, but who knows.
Good point. The kernel version in the transcript looks like the version I've got on a CentOS machine, so it's probably patched. Interestingly, the strings ("r00tr00t", "Executing shell") from the local-root tool they're using don't appear anywhere online, suggesting that it's something private and potentially unknown.
Re:Astalavista.com hacked, including details
by oscardelben on Friday June 05, 2009 @03:23AM
(#642851)
maybe it's just not indexed.
http://www.milw0rm.com/exploits/5092
http://www.milw0rm.com/exploits/5093