CVE-2008-3547 Buffer overflow in the server in OpenTTD 0.6.1 and earlier allows remote authenticated users to cause a denial of service (persistent game disruption) or possibly execute arbitrary code via vectors in...
HighCVSS 9.0
EPSS 4.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the server in OpenTTD 0.6.1 and earlier allows remote authenticated users to cause a denial of service (persistent game disruption) or possibly execute arbitrary code via vectors involving many long names for "companies and clients."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openttd | <= 0.6.1 | No fix listed |
| openttd | = 0.1.1 | No fix listed |
| openttd | = 0.1.2 | No fix listed |
| openttd | = 0.1.3 | No fix listed |
| openttd | = 0.1.4 | No fix listed |
| openttd | = 0.2.0 | No fix listed |
| openttd | = 0.2.1 | No fix listed |
| openttd | = 0.3.0 | No fix listed |
| openttd | = 0.3.1 | No fix listed |
| openttd | = 0.3.2 | No fix listed |
| openttd | = 0.3.2.1 | No fix listed |
| openttd | = 0.3.3 | No fix listed |
| openttd | = 0.3.4 | No fix listed |
| openttd | = 0.3.5 | No fix listed |
| openttd | = 0.3.6 | No fix listed |
| openttd | = 0.3.7 | No fix listed |
| openttd | = 0.4.0 | No fix listed |
| openttd | = 0.4.0.1 | No fix listed |
| openttd | = 0.4.5 | No fix listed |
| openttd | = 0.4.6 | No fix listed |
| openttd | = 0.4.7 | No fix listed |
| openttd | = 0.4.8 | No fix listed |
| openttd | = 0.4.8-rc1 | No fix listed |
| openttd | = 0.4.8-rc2 | No fix listed |
| openttd | = 0.5.0 | No fix listed |
Show 27 more
| Product | Affected versions | Fixed in |
|---|---|---|
| openttd | = 0.5.0-rc1 | No fix listed |
| openttd | = 0.5.0-rc2 | No fix listed |
| openttd | = 0.5.0-rc3 | No fix listed |
| openttd | = 0.5.0-rc4 | No fix listed |
| openttd | = 0.5.0-rc5 | No fix listed |
| openttd | = 0.5.1 | No fix listed |
| openttd | = 0.5.1-rc1 | No fix listed |
| openttd | = 0.5.1-rc2 | No fix listed |
| openttd | = 0.5.1-rc3 | No fix listed |
| openttd | = 0.5.2 | No fix listed |
| openttd | = 0.5.2-rc1 | No fix listed |
| openttd | = 0.5.3 | No fix listed |
| openttd | = 0.5.3-rc1 | No fix listed |
| openttd | = 0.5.3-rc2 | No fix listed |
| openttd | = 0.5.3-rc3 | No fix listed |
| openttd | = 0.6.0 | No fix listed |
| openttd | = 0.6.0-beta1 | No fix listed |
| openttd | = 0.6.0-beta2 | No fix listed |
| openttd | = 0.6.0-beta3 | No fix listed |
| openttd | = 0.6.0-beta4 | No fix listed |
| openttd | = 0.6.0-beta5 | No fix listed |
| openttd | = 0.6.0-rc1 | No fix listed |
| openttd | = 0.6.1-rc1 | No fix listed |
| openttd | = 0.6.1-rc2 | No fix listed |
| debian/openttd(Debian:12) | < 0.6.2-1 | 0.6.2-1 |
| debian/openttd(Debian:13) | < 0.6.2-1 | 0.6.2-1 |
| debian/openttd(Debian:14) | < 0.6.2-1 | 0.6.2-1 |
References
- bugs.debian.org
- bugs.gentoo.org
- [oss-security] 20080804 CVE id request: openttd mailing-list
- [oss-security] 20080805 Re: CVE id request: openttd mailing-list
- [oss-security] 20080805 Re: CVE id request: openttd mailing-list
- [oss-security] 20080807 Re: CVE id request: openttd mailing-list
- 34161 third-party-advisory vendor-advisory
- GLSA-200903-09 vendor-advisory
- sourceforge.net
- openttd-companies-clients-bo(49221) vdb-entry
- Debian Security Tracker CVE-2008-3547 vendor-advisory
- bugs.debian.org issue-tracking