OpenTTD 0.6.0 through 1.2.1 does not properly validate requests to clear a water tile, which allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a certain sequence of steps related to "the water/coast aspect of tiles which also have railtracks on one half."

openttd was updated to 1.2.2

  - many bugfixes including: Fix: In some cases ships could     be covered with land [FS#5254] (CVE-2012-3436,     bnc#775023)

Security update fixing Bug 844471 - (CVE-2012-3436): Denial of service (server) using ships on half tiles and landscaping

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The OpenTTD Team reports :

Denial of service (server) using ships on half tiles and landscaping.

Two denial of service vulnerabilities have been discovered in the server component of OpenTTD, a free reimplementation of Transport Tycoon Deluxe.

ID	Name	Product	Family	Severity
74728	openSUSE Security Update : openttd (openSUSE-SU-2012:1063-1)	Nessus	SuSE Local Security Checks	medium
62133	Fedora 18 : openttd-1.2.2-1.fc18 (2012-12191)	Nessus	Fedora Local Security Checks	medium
61674	Fedora 17 : openttd-1.2.2-1.fc17 (2012-12208)	Nessus	Fedora Local Security Checks	medium
61673	Fedora 16 : openttd-1.2.2-1.fc16 (2012-12198)	Nessus	Fedora Local Security Checks	medium
61587	FreeBSD : OpenTTD -- Denial of Service (0f62be39-e8e0-11e1-bea0-002354ed89bc)	Nessus	FreeBSD Local Security Checks	medium
61440	Debian DSA-2524-1 : openttd - several vulnerabilities	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2012-3436

high

Tenable Plugins

medium

medium

medium

medium

medium

medium