CVE-2007-3956 TeamSpeak WebServer 2.0 for Windows does not validate parameter value lengths and does not expire TCP sessions, which allows remote attackers to cause a denial of service (CPU and memory consumption)....
HighCVSS 7.8
EPSS 8.1%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
TeamSpeak WebServer 2.0 for Windows does not validate parameter value lengths and does not expire TCP sessions, which allows remote attackers to cause a denial of service (CPU and memory consumption) via long username and password parameters in a request to login.tscmd on TCP port 14534.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| teamspeak web server | = 2.0 | No fix listed |
References
- 38595 vdb-entry
- 26141 third-party-advisory
- 24977 vdb-entry
- teamspeak-login-dos(35518) vdb-entry
- 4205 exploit