Easy
Linux
SunsetNoontide Writeup - Proving Grounds
Easy Linux box running the backdoored UnrealIRCd 3.2.8.1, exploited via CVE-2010-2075 for a shell as the server user, then escalated to root through a trivially weak root password.