OpenSSH privilege escalation

Local user can hijack X-session of different user because of invalid DISPLAY variable initialization...