CVE-2008-5076

Published: Nov 14, 2008Modified: Apr 23, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

htop 0.7 writes process names to a terminal without sanitizing non-printable characters, which might allow local users to hide processes, modify arbitrary files, or have unspecified other impact via a process name with "crazy control strings."

Affected (1)

Products: Htop: Htop

Htop

1 product

Htop

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Htop Htop	Version 0.7

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (12)

http://bugs.debian.org/504144

Source: cve@mitre.org

Exploit

http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2008/11/02/1

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2008/11/14/3

Source: cve@mitre.org

http://www.securityfocus.com/bid/32081

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/46321

Source: cve@mitre.org

http://bugs.debian.org/504144