ALT-PU-2023-6111-3
Closed vulnerabilities
Published: 2008-11-14
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2008-5076
htop 0.7 writes process names to a terminal without sanitizing non-printable characters, which might allow local users to hide processes, modify arbitrary files, or have unspecified other impact via a process name with "crazy control strings."
Severity: MEDIUM (4.6)
References:
- http://bugs.debian.org/504144
- http://bugs.debian.org/504144
- SUSE-SR:2008:026
- SUSE-SR:2008:026
- [oss-security] 20081102 CVE id request: htop
- [oss-security] 20081102 CVE id request: htop
- [oss-security] 20081114 Re: CVE id request: htop
- [oss-security] 20081114 Re: CVE id request: htop
- 32081
- 32081
- htop-processname-weak-security(46321)
- htop-processname-weak-security(46321)
Closed bugs
Вынести desktop файл и сопутствующие файлы терминального приложения htop в отдельный пакет