OpenTTD before 1.1.5 contains a Denial of Service (slow read attack) that prevents users from joining the server.
The product does not properly control the allocation and maintenance of a limited resource.
Link | Tags |
---|---|
http://security.openttd.org/en/CVE-2012-0049 | patch vendor advisory |
https://security-tracker.debian.org/tracker/CVE-2012-0049 | third party advisory |
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-0049 | issue tracking third party advisory |
http://www.debian.org/security/2012/dsa-2524 | third party advisory |
http://www.openwall.com/lists/oss-security/2012/01/13/9 | third party advisory mailing list |