CVE-2007-4529 The WebAdmin interface in TeamSpeak Server 2.0.20.1 allows remote authenticated users with the ServerAdmin flag to assign Registered users certain privileges, resulting in a privilege set that extends...
HighCVSS 8.5
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The WebAdmin interface in TeamSpeak Server 2.0.20.1 allows remote authenticated users with the ServerAdmin flag to assign Registered users certain privileges, resulting in a privilege set that extends beyond that ServerAdmin's own servers, as demonstrated by the (1) AdminAddServer, (2) AdminDeleteServer, (3) AdminStartServer, and (4) AdminStopServer privileges; and administration of arbitrary virtual servers via a request to a .tscmd URI with a modified serverid parameter, as demonstrated by (a) add_server.tscmd, (b) ask_delete_server.tscmd, (c) start_server.tscmd, and (d) stop_server.tscmd.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| teamspeak web server | = 2.0.20.1 | No fix listed |
References
- 20070511 Teamspeak Server 2.0.20.1 Vulnerabilities mailing-list
- 36047 vdb-entry
- 25242 third-party-advisory
- securityvulns.com exploit
- 20070823 Re: TeamSpeak 2 Server Vulnerabilities? mailing-list
- 23935 vdb-entry
- teamspeak-webadmin-privilege-escalation(34254) vdb-entry