The remote host is missing an update to debian-goodies announced via advisory DSA 1527-1.

https://secure1.securityspace.com/smysecure/catid.html?in=DSA%201527-1

Thomas de Grenier de Latour discovered that the checkrestart tool in the debian-goodies suite of utilities, allowed local users to gain privileges via shell metacharacters in the name of the executable file for a running process. For the stable distribution (etch), this problem has been fixed in version 0.27+etch1. For the old stable distribution (sarge), this problem has been fixed in version 0.23+sarge1. For the unstable distribution (sid), this problem has been fixed in version 0.34. We recommend that you upgrade your debian-goodies package.