CVE-2011-4338

CVE-2011-4338 affects Shaman 1.0.9. The vulnerability arises when a user adds the line askforpwd=false to shaman.conf, allowing root privileges on the next run without entering the root password. Public documents from Red Hat and NVD confirm the issue and impact (local privilege escalation with c...