htop 0.7 writes process names to a terminal without sanitizing non-printable characters, which might allow local users to hide processes, modify arbitrary files, or have unspecified other impact via a process name with "crazy control strings."

insufficient character filters in htop when displaying commands allowed programs that rewrite their program name to inject escape sequences (CVE-2008-5076).

- Tue Nov 18 2008 Rafa Psota <rafalzaq at gmail.com> -     0.8.1-2

    - non-printable character filter patch (#504144)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Tue Nov 18 2008 Rafa Psota <rafalzaq at gmail.com> -     0.8.1-2

    - non-printable character filter patch (#504144)

    - Tue Oct 14 2008 Rafa Psota <rafalzaq at gmail.com> -       0.8.1-1

    - update to 0.8.1

    - Thu Jul 31 2008 Rafa Psota <rafalzaq at gmail.com> -       0.8-1

    - udate to 0.8

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Tue Nov 18 2008 Rafa Psota <rafalzaq at gmail.com> -     0.8.1-2

    - non-printable character filter patch (#504144)

    - Tue Oct 14 2008 Rafa Psota <rafalzaq at gmail.com> -       0.8.1-1

    - update to 0.8.1

    - Thu Jul 31 2008 Rafa Psota <rafalzaq at gmail.com> -       0.8-1

    - udate to 0.8

    - Sun Apr 27 2008 Rafa Psota <rafalzaq at gmail.com> -       0.7-2

    - desktop file fix

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
39986	openSUSE Security Update : htop (htop-332)	Nessus	SuSE Local Security Checks	medium
36933	Fedora 10 : htop-0.8.1-2.fc10 (2008-9944)	Nessus	Fedora Local Security Checks	medium
34981	openSUSE 10 Security Update : htop (htop-5824)	Nessus	SuSE Local Security Checks	medium
34835	Fedora 8 : htop-0.8.1-2.fc8 (2008-9791)	Nessus	Fedora Local Security Checks	medium
34829	Fedora 9 : htop-0.8.1-2.fc9 (2008-9728)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2008-5076

high

Tenable Plugins

medium

medium

medium

medium

medium