xorg-x11-server < 1.20.3 - 'modulepath' Local Privilege Escalation

!/bin/sh raptorxorgy - xorg-x11-server LPE via modulepath switch Copyright c 2018 Marco Ivaldi A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to...

X.Org Server Privilege Escalation

Vulnerability of the X.Org Server software, caused by errors in processing and checking command-line parameters. Exploiting this vulnerability can allow a remote attacker to gain root privileges and rewrite any file in the operating system using the modulepath and logfile parameters when running...

xorg-x11-server: Incorrect permission check in Xorg X server allows for privilege escalation

An incorrect permission check for -modulepath and -logfile options when starting Xorg X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root privileges...

X.Org X Server: Privilege escalation

Background The X Window System is a graphical windowing system based on a client/server model. Description An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to...

[ASA-201810-15] xorg-server: privilege escalation

Arch Linux Security Advisory ASA-201810-15 ========================================== Severity: High Date : 2018-10-29 CVE-ID : CVE-2018-14665 Package : xorg-server Type : privilege escalation Remote : Yes Link : https://security.archlinux.org/AVG-788 Summary ======= The package xorg-server befor...

Exploit for Incorrect Authorization in X.Org X_Server

CVE-2018-14665 0x00 Introduction Indian security researc...

New Privilege Escalation Flaw Affects Most Linux Distributions

An Indian security researcher has discovered a highly critical flaw in X.Org Server package that impacts OpenBSD and most Linux distributions, including Debian, Ubuntu, CentOS, Red Hat, and Fedora. Xorg X server is a popular open-source implementation of the X11 system display server that offers ...

DEBIAN-CVE-2018-14665

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root...

ALPINE-CVE-2018-14665

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root...

CVE-2018-14665

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root...

PT-2018-1714

Name of the Vulnerable Software and Affected Versions: X.Org Server versions prior to 1.20.3 Description: The issue is caused by incorrect handling and validation of command line parameters, specifically the modulepath and logfile options when starting the Xorg server. This could allow a remote...

UBUNTU-CVE-2018-14665

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root...

CVE-2018-14665: Incorrect Authorization

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root...

Xorg X11 Server SUID logfile Privilege Escalation

This module attempts to gain root privileges with SUID Xorg X11 server versions 1.19.0 use exploit/multi/local/xorg/x11suidserver msf undefinedx11suidserver show actions ...actions... msf undefinedx11suidserver set ACTION msf undefinedx11suidserver show options ...show and set optio...

pharoscontrols Information Disclosure

pharoscontrols Unauthorized Information Disclosure zoomeye dork : https://www.zoomeye.org/searchResult?q=%22Location%3A%20%2Fdefault%2Findex.lsp%22 Remote administration interface http://xx.xx.xx.xx/default/index.lsp Unauthorized Logfile Disclosure http://xx.xx.xx.xx/default/log.lsp...

openSUSE Security Update : postgresql96 (openSUSE-2018-638)

PostgreSQL was updated to 9.6.9 fixing bugs and security issues : Release notes : - https://www.postgresql.org/about/news/1851/ - https://www.postgresql.org/docs/current/static/release-9-6-9.html A dump/restore is not required for those running 9.6.X. However, if you use the adminpack extension,...

Windows Defender Firewall: Logfile path

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winadvsecprofilelogfilepath.nasl 10010 2018-05-29 14:43:35Z emoss $ Check value for Windows Defender Firewall: Path to logfile Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.ne...

Windows Defender Firewall: Logfile size limit

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winadvsecprofilelogfilesize.nasl 10010 2018-05-29 14:43:35Z emoss $ Check value for Windows Defender Firewall: logfile size limit Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

PostgreSQL adminpack Extension Security Bypass Vulnerability

PostgreSQL is a free object-relational database management system developed by the PostgreSQL development group . The system supports most of the SQL standard and provides many other features such as foreign keys, triggers, views, etc. adminpack is one of the contrib modules. A security...

PT-2018-3147

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 10.4 PostgreSQL versions prior to 9.6.9 Description The issue is related to insufficient access control in the pg catalog.pg logfile rotate function of the adminpack extension in PostgreSQL. This can be exploited b...