CVE-2008-3547: Buffer Overflow
Published Mar 10, 2009
·Updated
Buffer overflow in the server in OpenTTD 0.6.1 and earlier allows remote authenticated users to cause a denial of service (persistent game disruption) or possibly execute arbitrary code via vectors involving many long names for "companies and clients."
Affected Software
49 affected components
OpenTTD OpenTTD<=0.6.1
OpenTTD OpenTTD=0.1.1
OpenTTD OpenTTD=0.1.2
OpenTTD OpenTTD=0.1.3
OpenTTD OpenTTD=0.1.4
OpenTTD OpenTTD=0.2.0
OpenTTD OpenTTD=0.2.1
OpenTTD OpenTTD=0.3.0
OpenTTD OpenTTD=0.3.1
OpenTTD OpenTTD=0.3.2
OpenTTD OpenTTD=0.3.2.1
OpenTTD OpenTTD=0.3.3
OpenTTD OpenTTD=0.3.4
OpenTTD OpenTTD=0.3.5
OpenTTD OpenTTD=0.3.6
OpenTTD OpenTTD=0.3.7
OpenTTD OpenTTD=0.4.0
OpenTTD OpenTTD=0.4.0.1
OpenTTD OpenTTD=0.4.5
OpenTTD OpenTTD=0.4.6
OpenTTD OpenTTD=0.4.7
OpenTTD OpenTTD=0.4.8
OpenTTD OpenTTD=0.4.8-rc1
OpenTTD OpenTTD=0.4.8-rc2
OpenTTD OpenTTD=0.5.0
OpenTTD OpenTTD=0.5.0-rc1
OpenTTD OpenTTD=0.5.0-rc2
OpenTTD OpenTTD=0.5.0-rc3
OpenTTD OpenTTD=0.5.0-rc4
OpenTTD OpenTTD=0.5.0-rc5
OpenTTD OpenTTD=0.5.1
OpenTTD OpenTTD=0.5.1-rc1
OpenTTD OpenTTD=0.5.1-rc2
OpenTTD OpenTTD=0.5.1-rc3
OpenTTD OpenTTD=0.5.2
OpenTTD OpenTTD=0.5.2-rc1
OpenTTD OpenTTD=0.5.3
OpenTTD OpenTTD=0.5.3-rc1
OpenTTD OpenTTD=0.5.3-rc2
OpenTTD OpenTTD=0.5.3-rc3
OpenTTD OpenTTD=0.6.0
OpenTTD OpenTTD=0.6.0-beta1
OpenTTD OpenTTD=0.6.0-beta2
OpenTTD OpenTTD=0.6.0-beta3
OpenTTD OpenTTD=0.6.0-beta4
OpenTTD OpenTTD=0.6.0-beta5
OpenTTD OpenTTD=0.6.0-rc1
OpenTTD OpenTTD=0.6.1-rc1
OpenTTD OpenTTD=0.6.1-rc2
Event History
Mar 10, 2009
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-3547?
CVE-2008-3547 has a moderate severity rating due to its potential to cause denial of service or execute arbitrary code.
2
How do I fix CVE-2008-3547?
To fix CVE-2008-3547, update OpenTTD to a version later than 0.6.1.
3
What versions of OpenTTD are affected by CVE-2008-3547?
CVE-2008-3547 affects versions of OpenTTD up to and including 0.6.1.
4
Can CVE-2008-3547 be exploited remotely?
Yes, CVE-2008-3547 can be exploited by remote authenticated users leading to game disruption.
5
What type of vulnerability is CVE-2008-3547?
CVE-2008-3547 is a buffer overflow vulnerability in the OpenTTD server.