CVE-2008-5076 Other in n/a
Local attackers can exploit unsanitized process names in htop to hide processes or modify arbitrary files via control characters.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2008-5076?
CVE-2008-5076 is a medium-severity vulnerability in n/a, published on 14 Nov 2008. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
htop 0.7 writes process names to a terminal without sanitizing non-printable characters, which might allow local users to hide processes, modify arbitrary files, or have unspecified other impact via a process name with "crazy control strings."
Weakness: CWE-200
Which versions are affected by CVE-2008-5076?
It affects 1 product.
Products include Htop Htop.
How do I fix CVE-2008-5076?
Upgrade to a fixed version.
Is CVE-2008-5076 being exploited?
There is no known exploitation of CVE-2008-5076 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2008-5076, GHSA-h5hm-x9rx-833w.