[Alug] Security

Does anyone know of any attacks which can be made against a machine which only has ports for HTTP and SSH open? Assuming I don't have any silly CGI going on. I'm only considering attacks which give the attacker a foothold. Fx. flooding doesn't count. Thanks, Alexis