EUVD-2011-4270

Malware in sbrugna...

CVE-2011-4338

Shaman 1.0.9: Users can add the line askforpwd=false to his shaman.conf file, without entering the root password in shaman. The next time shaman is run, root privileges are granted despite the fact that the user never entered the root password...

CVE-2011-4338

CVE-2011-4338 affects Shaman 1.0.9. The vulnerability arises when a user adds the line askforpwd=false to shaman.conf, allowing root privileges on the next run without entering the root password. Public documents from Red Hat and NVD confirm the issue and impact (local privilege escalation with c...