PT-2008-6230 · Htop+1 · Htop+1

Steven M. Christey · Publicado 2008-11-14 · Atualizado 2023-10-06 · CVE-2008-5076

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions htop version 0.7

Description The issue allows local users to potentially hide processes, modify arbitrary files, or have unspecified other impact by utilizing a process name that contains non-printable characters, referred to as "crazy control strings."

Recommendations For htop version 0.7, consider updating to a newer version that addresses this issue, as the current version may allow malicious process names to cause unintended consequences. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

ALT-PU-2014-2037

ALT-PU-2023-6111

CVE-2008-5076

Produtos afetados

Alt Linux

Htop

Referências · 14

• 🔥 http://bugs.debian.org/504144 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5076 · Nota de Segurança
• http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2008-5076 · Aviso do Fabricante
• https://errata.altlinux.org/ALT-PU-2014-2037 · Aviso do Fabricante
• https://errata.altlinux.org/ALT-PU-2023-6111 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-5076 · Nota de Segurança
• http://openwall.com/lists/oss-security/2008/11/14/3 · Nota
• http://securityfocus.com/bid/32081 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46321 · Nota
• https://packages.altlinux.org/ru/vuln/CVE-2008-5076 · Nota
• http://openwall.com/lists/oss-security/2008/11/02/1 · Nota
• https://osv.dev/vulnerability/CVE-2008-5076 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2008-5076 · Aviso do Fabricante