Skip to Content.
Sympa Menu

sm-security - [SM-Security] openttd: format string vulnerabilities

sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

Chronological Thread  
  • From: Thomas Houssin <thomas.houssin AT gmail.com>
  • To: sm-security AT lists.ibiblio.org
  • Subject: [SM-Security] openttd: format string vulnerabilities
  • Date: Sun, 11 Sep 2005 16:33:32 +0200

Synopsis
========
OpenTTD is vulnerable to several format string vulnerabilities, which
may result in remote execution of arbitrary code.

Background
==========
OpenTTD is modeled after the original Transport Tycoon game by Chris
Sawyer and enhances the game experience dramatically. Many features were
inspired by TTDPatch while others are original.

Description
===========
CAN-2005-2763:
Multiple format string vulnerabilities in OpenTTD before 0.4.0.1 allow
remote attackers to cause a denial of service (crash) and possibly
execute arbitrary code via unspecified vectors.

Impact
======
A remote attacker could exploit these vulnerabilities to crash the
OpenTTD server or client and possibly execute arbitrary code with the
rights of the user running OpenTTD.

Workaround
==========
There are no known workarounds at this time.

Affected packages
=================
openttd in games grimoire is affected. This is now fixed in this grimoire.

Resolution
==========
All openttd users should upgrade to the latest available version:
# scribe update
# cast -c openttd

References
==========
[ 1 ] CAN-2005-2763
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2763
[ 2 ] GLSA 200509-03
http://www.gentoo.org/security/en/glsa/glsa-200509-03.xml

--
Thomas Houssin

Security Team Leader Source Mage GNU/Linux (http://www.sourcemage.org)
Key fingerprint = 3CB8 3FC4 840D B272 E623 BCB8 54DB F4E3 4240 4C36
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x42404C36

Attachment: signature.asc
Description: OpenPGP digital signature



  • [SM-Security] openttd: format string vulnerabilities, Thomas Houssin, 09/11/2005

Archive powered by MHonArc 2.6.24.

Top of Page