CVE-2010-0401: Medium severity OpenTTD OpenTTD vulnerability
Published May 4, 2010
·Updated
OpenTTD before 1.0.1 accepts a company password for authentication in response to a request for the server password, which allows remote authenticated users to bypass intended access restrictions or cause a denial of service (daemon crash) by sending a company password packet.
Affected Software
52 affected components
OpenTTD OpenTTD=0.6.0-rc1
OpenTTD OpenTTD=0.1.3
OpenTTD OpenTTD=0.1.2
OpenTTD OpenTTD=0.2.1
OpenTTD OpenTTD=0.4.0.1
OpenTTD OpenTTD=0.2.0
OpenTTD OpenTTD=0.6.1-rc2
OpenTTD OpenTTD=0.6.0-beta2
OpenTTD OpenTTD=0.5.0-rc1
OpenTTD OpenTTD=0.3.3
OpenTTD OpenTTD=0.3.1
OpenTTD OpenTTD=0.5.3-rc1
OpenTTD OpenTTD=0.4.7
OpenTTD OpenTTD=0.3.6
OpenTTD OpenTTD=0.3.4
OpenTTD OpenTTD=0.5.0-rc2
OpenTTD OpenTTD=0.6.0
OpenTTD OpenTTD=0.1.4
OpenTTD OpenTTD=0.6.0-beta1
OpenTTD OpenTTD=0.3.0
OpenTTD OpenTTD<=1.0.0
OpenTTD OpenTTD=0.5.3
OpenTTD OpenTTD=0.5.0-rc3
OpenTTD OpenTTD=0.5.0
OpenTTD OpenTTD=0.5.3-rc3
OpenTTD OpenTTD=0.4.0
OpenTTD OpenTTD=0.5.2
OpenTTD OpenTTD=0.6.1
OpenTTD OpenTTD=0.6.0-beta4
OpenTTD OpenTTD=0.5.2-rc1
OpenTTD OpenTTD=0.6.0-beta3
OpenTTD OpenTTD=0.6.1-rc1
OpenTTD OpenTTD=0.4.5
OpenTTD OpenTTD=0.5.1-rc1
OpenTTD OpenTTD=0.4.6
OpenTTD OpenTTD=0.6.2-rc1
OpenTTD OpenTTD=0.5.3-rc2
OpenTTD OpenTTD=0.3.2
OpenTTD OpenTTD=0.7.4
OpenTTD OpenTTD=0.1.1
OpenTTD OpenTTD=0.5.0-rc4
OpenTTD OpenTTD=0.4.8
OpenTTD OpenTTD=0.3.7
OpenTTD OpenTTD=0.5.1
OpenTTD OpenTTD=0.5.1-rc2
OpenTTD OpenTTD=0.5.0-rc5
OpenTTD OpenTTD=0.3.5
OpenTTD OpenTTD=0.3.2.1
OpenTTD OpenTTD=0.6.0-beta5
OpenTTD OpenTTD=0.5.1-rc3
OpenTTD OpenTTD=0.6.2-rc2
OpenTTD OpenTTD=0.4.8-rc1
Event History
May 4, 2010
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
May 5, 2010
Data Sourced
via NVD·01:22 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-0401?
CVE-2010-0401 has a medium severity rating, as it can allow authenticated users to bypass access restrictions.
2
How do I fix CVE-2010-0401?
To fix CVE-2010-0401, upgrade OpenTTD to version 1.0.1 or later.
3
What versions of OpenTTD are affected by CVE-2010-0401?
CVE-2010-0401 affects OpenTTD versions prior to 1.0.1, including versions 0.1.1 through 0.7.4.
4
What kind of attack does CVE-2010-0401 enable?
CVE-2010-0401 enables a denial of service attack or unauthorized access due to the password bypass vulnerability.
5
Who reported CVE-2010-0401?
CVE-2010-0401 was reported by a user through the OpenTTD bug tracking system.