Launchpad.net

CVE 2011-0703

In gksu-polkit before 0.0.3, the source file for xauth may contain arbitrary commands that may allow an attacker to overtake an administrator X11 session.

See the CVE page on Mitre.org for more details.