This two-year-old X.org give-me-root hole is so trivial to exploit, you can fit it in a single tweet

guest · Oct 25, 2018

This two-year-old X.org give-me-root hole is so trivial to exploit, you can fit it in a single tweet
October 25, 2018
https://www.theregister.co.uk/2018/10/25/x_org_server_vulnerability/

X.org, the X Window server used by various desktop Linux and BSD operating systems, has – depending on its configuration – a security vulnerability that can be exploited to gain root powers.

If a vulnerable version of X.org runs on a system as setuid root, it can be abused by normal logged-in users to gain administrator-level control over the machine. That would allow a miscreant to tamper with files, install spyware, and so on. Some Linux distros don't use X.org with elevated privileges, or are otherwise immune – such as CentOS; check for security updates anyway.

It's trivially exploitable, as Matthew Hickey, cofounder of British security shop Hacker House, tweeted

X.Org's advisory goes into more detail [...]
If you can't patch, there are workarounds: either remove the setuid bit from the X.Org binary [...] Alternatively, simply use a display manager to start X sessions.
Click to expand...

Log in or Sign up

This two-year-old X.org give-me-root hole is so trivial to exploit, you can fit it in a single tweet

guest Guest

Log in or Sign up

This two-year-old X.org give-me-root hole is so trivial to exploit, you can fit it in a single tweet

guest Guest

Useful Searches