This two-year-old X.org give-me-root hole is so trivial to exploit, you can fit it in a single tweet • The Register
Posted by jpluimers on 2018/11/02
If you run X.org, then patch now because of [WayBack] This two-year-old X.org give-me-root hole is so trivial to exploit, you can fit it in a single tweet • The Register
Overwrite arbitrary files? Load arbitrary code? As setuid root? Sure, why not!
This one got introduced in 2016, which is a lot more recent than an issue discovered in 2014 that was “ancient”: [WayBack] ‘Critical’ security bugs dating back to 1987 found in X Window • The Register:
27-year-old flaw and others slain in open-source patch batch
Via eXploit X: Give Me Root” – Computerphile
–jeroen
The Wiert Corner - irregular stream of stuff 
Leave a comment