PT-2020-7138 · Shaman · Shaman

Kurt Seifried · Published 2020-02-12 · Updated 2020-02-25 · CVE-2011-4338

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Shaman version 1.0.9

Description The issue allows users to gain root privileges without entering the root password by adding the line askforpwd=false to the shaman.conf file. This configuration change enables root access the next time Shaman is run, even if the user never entered the root password.

Recommendations For Shaman version 1.0.9, to resolve the issue, users should remove the line askforpwd=false from the shaman.conf file to ensure that root privileges are only granted after entering the root password. As a temporary workaround, consider restricting access to the shaman.conf file to prevent unauthorized modifications.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2011-4338

Affected Products

Shaman

References · 5

• 🔥 https://bbs.archlinux.org/viewtopic.php?id=64066&p=1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-4338 · Security Note
• https://openwall.com/lists/oss-security/2011/11/22/4 · Note
• https://t.me/cibsecurity/9798 · Telegram Post
• https://t.me/cvenotify/944 · Telegram Post