A basic malware to exploit this vulnerability:
http://si0ux.blogspot.com/2008/02/sara-malware.html