CVE-2010-0406

OpenTTD before 1.0.1 allows remote attackers to cause a denial of service file-descriptor exhaustion and daemon crash by performing incomplete downloads of the map...

CVE-2010-0401

OpenTTD before 1.0.1 accepts a company password for authentication in response to a request for the server password, which allows remote authenticated users to bypass intended access restrictions or cause a denial of service daemon crash by sending a company password packet...

CVE-2010-0401

OpenTTD before 1.0.1 accepts a company password for authentication in response to a request for the server password, which allows remote authenticated users to bypass intended access restrictions or cause a denial of service daemon crash by sending a company password packet...

DEBIAN-CVE-2010-0401

OpenTTD before 1.0.1 accepts a company password for authentication in response to a request for the server password, which allows remote authenticated users to bypass intended access restrictions or cause a denial of service daemon crash by sending a company password packet...

CVE-2010-0402

OpenTTD before 1.0.1 does not properly validate index values of certain items, which allows remote authenticated users to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted in-game command...

DEBIAN-CVE-2010-0402

OpenTTD before 1.0.1 does not properly validate index values of certain items, which allows remote authenticated users to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted in-game command...

CVE-2010-0402

OpenTTD before 1.0.1 does not properly validate index values of certain items, which allows remote authenticated users to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted in-game command...

CVE-2010-0401

OpenTTD before 1.0.1 accepts a company password for authentication in response to a request for the server password, which allows remote authenticated users to bypass intended access restrictions or cause a denial of service daemon crash by sending a company password packet...

Command injection

OpenTTD before 1.0.1 does not properly validate index values of certain items, which allows remote authenticated users to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted in-game command...

CVE-2010-0406

OpenTTD before 1.0.1 allows remote attackers to cause a denial of service file-descriptor exhaustion and daemon crash by performing incomplete downloads of the map...

Design/Logic Flaw

OpenTTD before 1.0.1 accepts a company password for authentication in response to a request for the server password, which allows remote authenticated users to bypass intended access restrictions or cause a denial of service daemon crash by sending a company password packet...

CVE-2010-0402

OpenTTD before 1.0.1 does not properly validate index values of certain items, which allows remote authenticated users to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted in-game command...

Design/Logic Flaw

OpenTTD before 1.0.1 allows remote attackers to cause a denial of service file-descriptor exhaustion and daemon crash by performing incomplete downloads of the map...

CVE-2010-0401

OpenTTD before 1.0.1 accepts a company password for authentication in response to a request for the server password, which allows remote authenticated users to bypass intended access restrictions or cause a denial of service daemon crash by sending a company password packet...

CVE-2010-0401

OpenTTD to version 1.0.0/1.0.1 before the patch fixes CVE-2010-0401, where a server password request can be answered with a company password, allowing remote authenticated users to bypass access controls or trigger a daemon crash. Root cause: authentication handler incorrectly accepts a company p...

CVE-2010-0406

OpenTTD before 1.0.1 allows remote attackers to cause a denial of service file-descriptor exhaustion and daemon crash by performing incomplete downloads of the map...

CVE-2010-0401

OpenTTD before 1.0.1 accepts a company password for authentication in response to a request for the server password, which allows remote authenticated users to bypass intended access restrictions or cause a denial of service daemon crash by sending a company password packet...

CVE-2010-0402

OpenTTD before 1.0.1 does not properly validate index values of certain items, which allows remote authenticated users to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted in-game command...

CVE-2010-0406

CVE-2010-0406 affects OpenTTD prior to 1.0.1. OpenTTD was vulnerable to a remote denial of service through incomplete map downloads, leading to file-descriptor exhaustion and daemon crash. Public references in the connected documents show Fedora advisories and OpenTTD/OpenVAS entries documenting ...

CVE-2010-0402

OpenTTD (affected version: before 1.0.1) is vulnerable to CVE-2010-0402 due to improper validation of index values in certain items. This can lead to a denial of service (daemon crash) and, per the description, possibly arbitrary code execution via crafted in-game commands when exploited by a rem...