PT-2008-6230 · Htop+1 · Htop+1

Steven M. Christey · Published 2008-11-14 · Updated 2023-10-06 · CVE-2008-5076

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions htop version 0.7

Description The issue allows local users to potentially hide processes, modify arbitrary files, or have unspecified other impact by utilizing a process name that contains non-printable characters, referred to as "crazy control strings."

Recommendations For htop version 0.7, consider updating to a newer version that addresses this issue, as the current version may allow malicious process names to cause unintended consequences. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

ALT-PU-2014-2037

ALT-PU-2023-6111

CVE-2008-5076

Affected Products

Alt Linux

Htop

References · 14

• 🔥 http://bugs.debian.org/504144 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5076 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2008-5076 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2014-2037 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2023-6111 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-5076 · Security Note
• https://osv.dev/vulnerability/CVE-2008-5076 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2008-5076 · Vendor Advisory
• http://openwall.com/lists/oss-security/2008/11/14/3 · Note
• http://securityfocus.com/bid/32081 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46321 · Note
• https://packages.altlinux.org/ru/vuln/CVE-2008-5076 · Note
• http://openwall.com/lists/oss-security/2008/11/02/1 · Note