3 ms·
Yeah, rootless is key here. This allows RCE, but that is usually not valuable because the X server is running with the same permissions as the application. How
by kevincox 3y ago
Yeah, rootless is key here. This allows RCE, but that is usually not valuable because the X server is running with the same permissions as the application.
However these vulnerabilities are old enough that they would have been useful when X always ran as root.
- tetha 3y agoMh. Though at that point you might be looking at desktop computers, and access to the current users file might be good enough. Sure, you can't install printer drivers via non-root X servers, but you can probably exfiltrate their local browser data (credit to XKCD[1]). It's another hole where vulnerability assessment is kinda... wonky. 1: https://xkcd.com/1200/ https://xkcd.com/1200/