CVE-2011-3341: High severity openr opentmpfiles vulnerability
Published Sep 8, 2011
·Updated
Multiple off-by-one errors in ordercmd.cpp in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted CMDINSERTORDER command.
Affected Software
107 affected components
OpenTTD OpenTTD<=1.1.2
OpenTTD OpenTTD=0.1.1
OpenTTD OpenTTD=0.1.2
OpenTTD OpenTTD=0.1.3
OpenTTD OpenTTD=0.1.4
OpenTTD OpenTTD=0.2.0
OpenTTD OpenTTD=0.2.1
OpenTTD OpenTTD=0.3.0
OpenTTD OpenTTD=0.3.1
OpenTTD OpenTTD=0.3.2
OpenTTD OpenTTD=0.3.2.1
OpenTTD OpenTTD=0.3.3
OpenTTD OpenTTD=0.3.4
OpenTTD OpenTTD=0.3.5
OpenTTD OpenTTD=0.3.6
OpenTTD OpenTTD=0.3.7
OpenTTD OpenTTD=0.4.0
OpenTTD OpenTTD=0.4.0.1
OpenTTD OpenTTD=0.4.5
OpenTTD OpenTTD=0.4.6
OpenTTD OpenTTD=0.4.7
OpenTTD OpenTTD=0.4.8
OpenTTD OpenTTD=0.4.8-rc1
OpenTTD OpenTTD=0.4.8-rc2
OpenTTD OpenTTD=0.5.0
OpenTTD OpenTTD=0.5.0-rc1
OpenTTD OpenTTD=0.5.0-rc2
OpenTTD OpenTTD=0.5.0-rc3
OpenTTD OpenTTD=0.5.0-rc4
OpenTTD OpenTTD=0.5.0-rc5
OpenTTD OpenTTD=0.5.1
OpenTTD OpenTTD=0.5.1-rc1
OpenTTD OpenTTD=0.5.1-rc2
OpenTTD OpenTTD=0.5.1-rc3
OpenTTD OpenTTD=0.5.2
OpenTTD OpenTTD=0.5.2-rc1
OpenTTD OpenTTD=0.5.3
OpenTTD OpenTTD=0.5.3-rc1
OpenTTD OpenTTD=0.5.3-rc2
OpenTTD OpenTTD=0.5.3-rc3
OpenTTD OpenTTD=0.6.0
OpenTTD OpenTTD=0.6.0-beta1
OpenTTD OpenTTD=0.6.0-beta2
OpenTTD OpenTTD=0.6.0-beta3
OpenTTD OpenTTD=0.6.0-beta4
OpenTTD OpenTTD=0.6.0-beta5
OpenTTD OpenTTD=0.6.0-rc1
OpenTTD OpenTTD=0.6.1
OpenTTD OpenTTD=0.6.1-rc1
OpenTTD OpenTTD=0.6.1-rc2
OpenTTD OpenTTD=0.6.2
OpenTTD OpenTTD=0.6.2-rc1
OpenTTD OpenTTD=0.6.2-rc2
OpenTTD OpenTTD=0.6.3
OpenTTD OpenTTD=0.6.3-rc1
OpenTTD OpenTTD=0.7.0
OpenTTD OpenTTD=0.7.0-beta1
OpenTTD OpenTTD=0.7.0-beta2
OpenTTD OpenTTD=0.7.0-rc1
OpenTTD OpenTTD=0.7.0-rc2
OpenTTD OpenTTD=0.7.1
OpenTTD OpenTTD=0.7.1-rc1
OpenTTD OpenTTD=0.7.1-rc2
OpenTTD OpenTTD=0.7.1-rc3
OpenTTD OpenTTD=0.7.2
OpenTTD OpenTTD=0.7.2-rc1
OpenTTD OpenTTD=0.7.2-rc2
OpenTTD OpenTTD=0.7.3
OpenTTD OpenTTD=0.7.3-rc1
OpenTTD OpenTTD=0.7.3-rc2
OpenTTD OpenTTD=0.7.4
OpenTTD OpenTTD=0.7.4-rc1
OpenTTD OpenTTD=0.7.5
OpenTTD OpenTTD=0.7.5-rc1
OpenTTD OpenTTD=1.0.0
OpenTTD OpenTTD=1.0.0-beta1
OpenTTD OpenTTD=1.0.0-beta2
OpenTTD OpenTTD=1.0.0-beta3
OpenTTD OpenTTD=1.0.0-beta4
OpenTTD OpenTTD=1.0.0-rc1
OpenTTD OpenTTD=1.0.0-rc2
OpenTTD OpenTTD=1.0.0-rc3
OpenTTD OpenTTD=1.0.1
OpenTTD OpenTTD=1.0.1-rc1
OpenTTD OpenTTD=1.0.1-rc2
OpenTTD OpenTTD=1.0.2
OpenTTD OpenTTD=1.0.2-rc1
OpenTTD OpenTTD=1.0.3
OpenTTD OpenTTD=1.0.3-rc1
OpenTTD OpenTTD=1.0.4
OpenTTD OpenTTD=1.0.4-rc1
OpenTTD OpenTTD=1.0.5
OpenTTD OpenTTD=1.0.5-rc1
OpenTTD OpenTTD=1.0.5-rc2
OpenTTD OpenTTD=1.1.0
OpenTTD OpenTTD=1.1.0-beta1
OpenTTD OpenTTD=1.1.0-beta2
OpenTTD OpenTTD=1.1.0-beta3
OpenTTD OpenTTD=1.1.0-beta4
OpenTTD OpenTTD=1.1.0-beta5
OpenTTD OpenTTD=1.1.0-rc1
OpenTTD OpenTTD=1.1.0-rc2
OpenTTD OpenTTD=1.1.0-rc3
OpenTTD OpenTTD=1.1.1
OpenTTD OpenTTD=1.1.1-rc1
OpenTTD OpenTTD=1.1.2-rc1
OpenTTD OpenTTD=1.1.2-rc2
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Sep 8, 2011
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-3341?
CVE-2011-3341 has a severity rating that indicates it could lead to denial of service or remote code execution.
2
How do I fix CVE-2011-3341?
To fix CVE-2011-3341, you should upgrade to OpenTTD version 1.1.3 or later.
3
What kind of exploits are associated with CVE-2011-3341?
CVE-2011-3341 can be exploited to cause crashes in the OpenTTD daemon or to execute arbitrary code remotely.
4
Which versions of OpenTTD are affected by CVE-2011-3341?
CVE-2011-3341 affects OpenTTD versions prior to 1.1.3, including various beta and release candidates.
5
Is there a patch available for CVE-2011-3341?
Yes, a patch for CVE-2011-3341 is available and included in subsequent versions of OpenTTD after 1.1.3.