The mortal sin: reusing a nonce

In CTR mode (as in CBC with the IV), it is catastrophic to reuse the same (key, nonce) pair to encrypt two different messages.

Explain why this is dangerous, and what an attacker can gain from it, even without knowing the key.