In gksu-polkit before 0.0.3, the source file for xauth may contain arbitrary commands that may allow an attacker to overtake an administrator X11 session.
| Software | From | Fixed in |
|---|---|---|
| gksu-polkit_project / gksu-polkit | - | 0.0.3 |
| debian / debian_linux | 6.0 | 6.0.x |