Man, su ,and the pebcak virus.
It seems to much analyzation was going on, but if you look carefully at the
original post the user typer man without any options, man then asked which
man page you wanted, exited and gave a shell prompt back. It didn't ask a
question and wait for an answer. The user then type su, thinking it was a
question and man was prompting for an answer. Well as we all know if you type
su at a command prompt without args your asked for root's password.