CVE ID:	CVE-2018-14665
Description:	A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root privileges.
Test IDs:	1.3.6.1.4.1.25623.1.0.843800   1.3.6.1.4.1.25623.1.0.882986   1.3.6.1.4.1.25623.1.1.2.2019.2553   1.3.6.1.4.1.25623.1.1.4.2018.3680.1   1.3.6.1.4.1.25623.1.0.875244   1.3.6.1.4.1.25623.1.1.4.2018.3456.1   1.3.6.1.4.1.25623.1.1.2.2020.1236   1.3.6.1.4.1.25623.1.0.704328   1.3.6.1.4.1.25623.1.0.852126   1.3.6.1.4.1.25623.1.1.10.2018.0421   1.3.6.1.4.1.25623.1.0.876007   1.3.6.1.4.1.25623.1.1.2.2019.2123
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2018-14665 BugTraq ID: 105741 http://www.securityfocus.com/bid/105741 Debian Security Information: DSA-4328 (Google Search) https://www.debian.org/security/2018/dsa-4328 https://www.exploit-db.com/exploits/45697/ https://www.exploit-db.com/exploits/45742/ https://www.exploit-db.com/exploits/45832/ https://www.exploit-db.com/exploits/45908/ https://www.exploit-db.com/exploits/45922/ https://www.exploit-db.com/exploits/45938/ https://www.exploit-db.com/exploits/46142/ https://security.gentoo.org/glsa/201810-09 http://packetstormsecurity.com/files/154942/Xorg-X11-Server-SUID-modulepath-Privilege-Escalation.html http://packetstormsecurity.com/files/155276/Xorg-X11-Server-Local-Privilege-Escalation.html https://www.securepatterns.com/2018/10/cve-2018-14665-xorg-x-server.html https://lists.x.org/archives/xorg-announce/2018-October/002927.html RedHat Security Advisories: RHSA-2018:3410 https://access.redhat.com/errata/RHSA-2018:3410 http://www.securitytracker.com/id/1041948 https://usn.ubuntu.com/3802-1/