Buffer overflow

Buffer overflow in src/openttd.cpp in OpenTTD before 0.6.2 allows local users to execute arbitrary code via a large filename supplied to the "-g" parameter in the ttdmain function. NOTE: it is unlikely that this issue would cross privilege boundaries in typical environments...

CVE-2008-3577

Buffer overflow in src/openttd.cpp in OpenTTD before 0.6.2 allows local users to execute arbitrary code via a large filename supplied to the "-g" parameter in the ttdmain function. NOTE: it is unlikely that this issue would cross privilege boundaries in typical environments...

DEBIAN-CVE-2008-3576

Buffer overflow in the TruncateString function in src/gfx.cpp in OpenTTD before 0.6.2 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted string. NOTE: some of these details are obtained from third party information...

DEBIAN-CVE-2008-3577

Buffer overflow in src/openttd.cpp in OpenTTD before 0.6.2 allows local users to execute arbitrary code via a large filename supplied to the "-g" parameter in the ttdmain function. NOTE: it is unlikely that this issue would cross privilege boundaries in typical environments...

CVE-2008-3576

Buffer overflow in the TruncateString function in src/gfx.cpp in OpenTTD before 0.6.2 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted string. NOTE: some of these details are obtained from third party information...

CVE-2008-3577

Buffer overflow in src/openttd.cpp in OpenTTD before 0.6.2 allows local users to execute arbitrary code via a large filename supplied to the "-g" parameter in the ttdmain function. NOTE: it is unlikely that this issue would cross privilege boundaries in typical environments...

CVE-2008-3576

OpenTTD prior to version 0.6.2 is affected by a buffer overflow in the TruncateString function in src/gfx.cpp, allowing a remote attacker to cause a daemon crash or possibly execute arbitrary code via a crafted string. This vulnerability is cited across multiple sources (NVD, SUSE, Gentoo GLSA, O...

CVE-2008-3577

Buffer overflow in src/openttd.cpp in OpenTTD before 0.6.2 allows local users to execute arbitrary code via a large filename supplied to the "-g" parameter in the ttdmain function. NOTE: it is unlikely that this issue would cross privilege boundaries in typical environments...

CVE-2008-3576

Buffer overflow in the TruncateString function in src/gfx.cpp in OpenTTD before 0.6.2 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted string. NOTE: some of these details are obtained from third party information...

CVE-2008-3577

OpenTTD contains a local-buffer overflow in OpenTTD/src/openttd.cpp (ttd_main) when processing a large filename with the -g option, affecting OpenTTD versions before 0.6.2. The vulnerability allows an authenticated local attacker to execute arbitrary code with the server’s privileges. Mitigation ...

CVE-2008-3576

Buffer overflow in the TruncateString function in src/gfx.cpp in OpenTTD before 0.6.2 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted string. NOTE: some of these details are obtained from third party information...

OpenTTD多个缓冲区溢出漏洞

BUGTRAQ ID: 30525 CNCAN ID：CNCAN-2008080504 OpenTTD是一款开放源码的游戏引擎。 OpenTTD存在多个缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 目前没有详细的漏洞细节提供。 OpenTTD 0.6.1 升级到OpenTTD 0.6.2版本： http://www.openttd.com/...

GLSA-200609-03 : OpenTTD: Remote Denial of Service

The remote host is affected by the vulnerability described in GLSA-200609-03 OpenTTD: Remote Denial of Service OpenTTD is vulnerable to a Denial of Service attack due to a flaw in the manner the game server handles errors in command packets. Impact : An authenticated attacker can cause a Denial o...

OpenTTD: Remote Denial of service

Background OpenTTD is a clone of Transport Tycoon Deluxe. Description OpenTTD is vulnerable to a Denial of Service attack due to a flaw in the manner the game server handles errors in command packets. Impact An authenticated attacker can cause a Denial of Service by sending an invalid error numbe...

CVE-2006-1998

OpenTTD 0.4.7 and earlier allows local users to cause a denial of service application exit via a large invalid error number, which triggers an error...

Code injection

The multiplayer menu in OpenTTD 0.4.7 allows remote attackers to cause a denial of service via a UDP packet with an incorrect size, which causes the client to return to the main menu...

Code injection

OpenTTD 0.4.7 and earlier allows local users to cause a denial of service application exit via a large invalid error number, which triggers an error...

CVE-2006-1999

The multiplayer menu in OpenTTD 0.4.7 allows remote attackers to cause a denial of service via a UDP packet with an incorrect size, which causes the client to return to the main menu...

CVE-2006-1999

The multiplayer menu in OpenTTD 0.4.7 allows remote attackers to cause a denial of service via a UDP packet with an incorrect size, which causes the client to return to the main menu...

CVE-2006-1998

OpenTTD 0.4.7 and earlier is vulnerable to a local denial-of-service due to a flaw in error handling for command packets; sending a large invalid error number can trigger an application exit. The issue affects OpenTTD server components when handling certain errors, allowing a local attacker to ca...