This host is installed with OpenTTD and is prone to multiple security bypass vulnerabilities.

Successful exploitation will allow attackers to bypass certain security restrictions and cause Denial of Service. Impact Level: Application

Upgrade to the latest version of OpenTTD 1.0.1 or later, For updates refer to http://www.openttd.org

The flaws are due to - error in the handling of password requests which accepts a company password for authentication in response to a request for the server password. - A file descriptor leak can be exploited to crash the server by performing incomplete downloads of the map. - Improper validation of index values of certain items.

OpenTTD 1.0 and prior.

• http://secunia.com/advisories/39669
• http://security.openttd.org/en/CVE-2010-0401
• http://security.openttd.org/en/CVE-2010-0402
• http://security.openttd.org/en/CVE-2010-0406

---

Updated on 2015-03-25