"Damn Vulnerable Linux (DVL) is everything a good Linux
distribution isn't. Its developers have spent hours stuffing it
with broken, ill-configured, outdated, and exploitable software
that makes it vulnerable to attacks. DVL isn't built to run on your
desktop--it's a learning tool for security students.
"DVL is a live CD available as a 150MB ISO. It's based on the
popular mini-Linux distribution Damn Small Linux (DSL), not only
for its minimal size, but also for the fact that DSL uses a 2.4
kernel, which makes it easier to offer vulnerable elements that
might not work under the 2.6 kernel. It contains older, easily
breakable versions of Apache, MySQL, PHP, and FTP and SSH daemons,
as well as several tools available to help you compile, debug, and
break applications running on these services, including GCC, GDB,
NASM, strace, ELF Shell, DDD, LDasm, LIDa, and more..."