OpenTTD 'Water Clearing' Feature Denial Of Service Vulnerability

Bugtraq ID:	54720
Class:	Input Validation Error
CVE:	CVE-2012-3436
Remote:	Yes
Local:	No
Published:	Jul 30 2012 12:00AM
Updated:	Apr 13 2015 08:48PM
Credit:	Marek
Vulnerable:	OpenTTD OpenTTD 1.0.5 OpenTTD OpenTTD 1.0.4 OpenTTD OpenTTD 1.0.2 OpenTTD OpenTTD 1.0.1 OpenTTD OpenTTD 1.0 RC3 OpenTTD OpenTTD 1.0 rc2 OpenTTD OpenTTD 1.0 RC1 OpenTTD OpenTTD 1.0 beta3 OpenTTD OpenTTD 1.0 Beta2 OpenTTD OpenTTD 1.0 beta1 OpenTTD OpenTTD 1.0 OpenTTD OpenTTD 0.7.5 OpenTTD OpenTTD 0.7.4 OpenTTD OpenTTD 0.6.3 OpenTTD OpenTTD 0.6.2 OpenTTD OpenTTD 0.6.1 OpenTTD OpenTTD 1.1.5 OpenTTD OpenTTD 1.1.4 OpenTTD OpenTTD 1.1.3 OpenTTD OpenTTD 1.0.5 Rc2 OpenTTD OpenTTD 1.0.5 Rc1 OpenTTD OpenTTD 1.0.4 Rc1 OpenTTD OpenTTD 1.0.3 Rc1 OpenTTD OpenTTD 1.0.3 OpenTTD OpenTTD 1.0.2 Rc1 OpenTTD OpenTTD 1.0.1 Rc2 OpenTTD OpenTTD 1.0.1 RC1 OpenTTD OpenTTD 1.0.0 Beta4 OpenTTD OpenTTD 0.7 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:

OpenTTD 'Water Clearing' Feature Denial Of Service Vulnerability

OpenTTD is prone to a denial-of-service vulnerability.

Successfully exploiting this issue will allow remote attackers to crash the server, denying service to legitimate users.

OpenTTD versions 0.6.0 through 1.2.1 are affected.

OpenTTD 'Water Clearing' Feature Denial Of Service Vulnerability

Attackers can use readily available tools to exploit this issue.