In gksu-polkit before 0.0.3, the source file for xauth may contain arbitrary commands that may allow an attacker to overtake an administrator X11 session.
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.01267·Published 2019-11-15·Fixed in 0.0.3CWE-20
gksu-polkit-0.0.3-6.fc18 was reported as fixing the issue in CVE-2012-5617 but the patch was improperly applied and it did not fixed the security issue.