Name of the Vulnerable Software and Affected Versions:
X.Org Server versions prior to 1.20.3
Description:
The issue is caused by incorrect handling and validation of command line parameters, specifically the `modulepath` and `logfile` options when starting the Xorg server. This could allow a remote attacker to gain elevated privileges on the system, potentially leading to the execution of arbitrary code under root privileges. The vulnerability can be exploited by using the `-modulepath` or `-logfile` arguments to overwrite arbitrary files on the system.
Recommendations:
For versions prior to 1.20.3, update to version 1.20.3 or later to resolve the issue.
As a temporary workaround, consider restricting access to the `modulepath` and `logfile` options when starting the Xorg server to minimize the risk of exploitation.