Beep: use CVE-2012-4869 where it fits the service, gain a shell, and escalate to root.