The theory behind most of the local exploits out there. Keep in mind that practice is the best way to learn ;)

http://insecure.org/stf/smashstack.html