oss-sec mailing list archives
CVE request for OpenTTD
From: Rubidium <rubidium () openttd org>
Date: Sat, 07 Jan 2012 16:13:50 +0100
Hi folks, we, the OpenTTD developers, have identified a security vulnerability inOpenTTD (an open source game with multiplayer). Would you be so kind as to allocate a CVE id for this issue?
The issue concerns a denial of service vulnerability in the form of a slow read attack preventing anyone to join the server, and preventing the continuation of a game when 'pause on join' is enabled. This attack requires the attacker to be authorized, but most servers do not implement authorization. The first vulnerable version is 0.3.5, the upcoming 1.1.5 release will have the issue fixed.
Once a CVE id is allocated, the issue and fix will be documented at http://security.openttd.org/CVE-2012-xxxx Thanks in advance, Remko 'Rubidium' Bijker (Please CC me, I'm not subscribed)
Current thread:
- CVE request for OpenTTD Rubidium (Jan 07)
- Re: CVE request for OpenTTD Kurt Seifried (Jan 09)
- Re: CVE request for OpenTTD Kurt Seifried (Jan 13)
- Re: CVE request for OpenTTD - use CVE-2012-0049! Kurt Seifried (Jan 13)
- Re: CVE request for OpenTTD Kurt Seifried (Jan 13)
- Re: CVE request for OpenTTD Kurt Seifried (Jan 09)