CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
AI Score
Confidence
Low
EPSS
Percentile
91.1%
Buffer overflow in the server in OpenTTD 0.6.1 and earlier allows remote authenticated users to cause a denial of service (persistent game disruption) or possibly execute arbitrary code via vectors involving many long names for “companies and clients.”
Vendor | Product | Version | CPE |
---|---|---|---|
openttd | openttd | * | cpe:2.3:a:openttd:openttd:*:*:*:*:*:*:*:* |
openttd | openttd | 0.1.1 | cpe:2.3:a:openttd:openttd:0.1.1:*:*:*:*:*:*:* |
openttd | openttd | 0.1.2 | cpe:2.3:a:openttd:openttd:0.1.2:*:*:*:*:*:*:* |
openttd | openttd | 0.1.3 | cpe:2.3:a:openttd:openttd:0.1.3:*:*:*:*:*:*:* |
openttd | openttd | 0.1.4 | cpe:2.3:a:openttd:openttd:0.1.4:*:*:*:*:*:*:* |
openttd | openttd | 0.2.0 | cpe:2.3:a:openttd:openttd:0.2.0:*:*:*:*:*:*:* |
openttd | openttd | 0.2.1 | cpe:2.3:a:openttd:openttd:0.2.1:*:*:*:*:*:*:* |
openttd | openttd | 0.3.0 | cpe:2.3:a:openttd:openttd:0.3.0:*:*:*:*:*:*:* |
openttd | openttd | 0.3.1 | cpe:2.3:a:openttd:openttd:0.3.1:*:*:*:*:*:*:* |
openttd | openttd | 0.3.2 | cpe:2.3:a:openttd:openttd:0.3.2:*:*:*:*:*:*:* |
bugs.debian.org/493714
bugs.gentoo.org/show_bug.cgi?id=233929
marc.info/?l=oss-security&m=121787604812284&w=2
marc.info/?l=oss-security&m=121790659421159&w=2
marc.info/?l=oss-security&m=121797672406282&w=2
marc.info/?l=oss-security&m=121814230706576&w=2
secunia.com/advisories/34161
security.gentoo.org/glsa/glsa-200903-09.xml
sourceforge.net/project/shownotes.php?release_id=617243
exchange.xforce.ibmcloud.com/vulnerabilities/49221