Vulnerabilities > CVE-2012-0048 - Resource Management Errors vulnerability in Openttd

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

PARTIAL

network

openttd

CWE-399

NVD

Published: 2012-08-25

Updated: 2012-08-27

Summary

OpenTTD 0.3.5 through 1.1.4 allows remote attackers to cause a denial of service (game pause) by connecting to the server and not finishing the (1) authorization phase or (2) map download, aka a "slow read" attack.

Vulnerable Configurations

Part	Description	Count
Application	Openttd Openttd Openttd 0.3.5 Openttd Openttd 0.3.6 Openttd Openttd 0.3.7 Openttd Openttd 0.4.0 Openttd Openttd 0.4.0.1 Openttd Openttd 0.4.5 Openttd Openttd 0.4.6 Openttd Openttd 0.4.7 Openttd Openttd 0.4.8 Openttd Openttd 0.5.0 Openttd Openttd 0.5.1 Openttd Openttd 0.5.2 Openttd Openttd 0.5.3 Openttd Openttd 0.6.0 Openttd Openttd 0.6.1 Openttd Openttd 0.6.2 Openttd Openttd 0.6.2-Rc1 Openttd Openttd 0.6.2-Rc2 Openttd Openttd 0.6.3 Openttd Openttd 0.7.0 Openttd Openttd 0.7.1 Openttd Openttd 0.7.2 Openttd Openttd 0.7.3 Openttd Openttd 0.7.4 Openttd Openttd 0.7.5 Openttd Openttd 1.0.0 Openttd Openttd 1.0.1 Openttd Openttd 1.0.2 Openttd Openttd 1.0.3 Openttd Openttd 1.0.4 Openttd Openttd 1.0.5 Openttd Openttd 1.1.3 Openttd Openttd 1.1.4	85

Common Weakness Enumeration (CWE)

CWE-399 - Resource Management Errors

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References