CVE-2010-0402: Code Injection
Published May 4, 2010
·Updated
OpenTTD before 1.0.1 does not properly validate index values of certain items, which allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted in-game command.
Affected Software
52 affected components
OpenTTD OpenTTD=0.6.0-rc1
OpenTTD OpenTTD=0.1.3
OpenTTD OpenTTD=0.1.2
OpenTTD OpenTTD=0.2.1
OpenTTD OpenTTD=0.4.0.1
OpenTTD OpenTTD=0.2.0
OpenTTD OpenTTD=0.6.1-rc2
OpenTTD OpenTTD=0.6.0-beta2
OpenTTD OpenTTD=0.5.0-rc1
OpenTTD OpenTTD=0.3.3
OpenTTD OpenTTD=0.3.1
OpenTTD OpenTTD=0.5.3-rc1
OpenTTD OpenTTD=0.4.7
OpenTTD OpenTTD=0.3.6
OpenTTD OpenTTD=0.3.4
OpenTTD OpenTTD=0.5.0-rc2
OpenTTD OpenTTD=0.6.0
OpenTTD OpenTTD=0.1.4
OpenTTD OpenTTD=0.6.0-beta1
OpenTTD OpenTTD=0.3.0
OpenTTD OpenTTD<=1.0.0
OpenTTD OpenTTD=0.5.3
OpenTTD OpenTTD=0.5.0-rc3
OpenTTD OpenTTD=0.5.0
OpenTTD OpenTTD=0.5.3-rc3
OpenTTD OpenTTD=0.4.0
OpenTTD OpenTTD=0.5.2
OpenTTD OpenTTD=0.6.1
OpenTTD OpenTTD=0.6.0-beta4
OpenTTD OpenTTD=0.5.2-rc1
OpenTTD OpenTTD=0.6.0-beta3
OpenTTD OpenTTD=0.6.1-rc1
OpenTTD OpenTTD=0.4.5
OpenTTD OpenTTD=0.5.1-rc1
OpenTTD OpenTTD=0.4.6
OpenTTD OpenTTD=0.6.2-rc1
OpenTTD OpenTTD=0.5.3-rc2
OpenTTD OpenTTD=0.3.2
OpenTTD OpenTTD=0.7.4
OpenTTD OpenTTD=0.1.1
OpenTTD OpenTTD=0.5.0-rc4
OpenTTD OpenTTD=0.4.8
OpenTTD OpenTTD=0.3.7
OpenTTD OpenTTD=0.5.1
OpenTTD OpenTTD=0.5.1-rc2
OpenTTD OpenTTD=0.5.0-rc5
OpenTTD OpenTTD=0.3.5
OpenTTD OpenTTD=0.3.2.1
OpenTTD OpenTTD=0.6.0-beta5
OpenTTD OpenTTD=0.5.1-rc3
OpenTTD OpenTTD=0.6.2-rc2
OpenTTD OpenTTD=0.4.8-rc1
Event History
May 4, 2010
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
May 5, 2010
Data Sourced
via NVD·01:22 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-0402?
CVE-2010-0402 has a severity rating that allows for denial of service or potential arbitrary code execution.
2
How do I fix CVE-2010-0402?
To fix CVE-2010-0402, upgrade to OpenTTD version 1.0.1 or later.
3
What types of issues does CVE-2010-0402 cause?
CVE-2010-0402 can cause a denial of service by crashing the daemon and may allow for arbitrary code execution.
4
Who is affected by CVE-2010-0402?
CVE-2010-0402 affects all versions of OpenTTD before 1.0.1.
5
What should I do if I am using an affected version of OpenTTD related to CVE-2010-0402?
If using an affected version of OpenTTD related to CVE-2010-0402, you should immediately update to the latest version.