CVE

Id
27886  
CVE No.
CVE-2007-4529  
Status
Candidate  
Description
The WebAdmin interface in TeamSpeak Server 2.0.20.1 allows remote authenticated users with the ServerAdmin flag to assign Registered users certain privileges, resulting in a privilege set that extends beyond that ServerAdmin"s own servers, as demonstrated by the (1) AdminAddServer, (2) AdminDeleteServer, (3) AdminStartServer, and (4) AdminStopServer privileges; and administration of arbitrary virtual servers via a request to a .tscmd URI with a modified serverid parameter, as demonstrated by (a) add_server.tscmd, (b) ask_delete_server.tscmd, (c) start_server.tscmd, and (d) stop_server.tscmd.  
Phase
Assigned (20070824)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
287640 27886 CVE-2007-4529 BUGTRAQ:20070823 Re: TeamSpeak 2 Server Vulnerabilities?  View
287641 27886 CVE-2007-4529 URL:http://www.securityfocus.com/archive/1/archive/1/477424/100/0/threaded  View
287642 27886 CVE-2007-4529 FULLDISC:20070511 Teamspeak Server 2.0.20.1 Vulnerabilities  View
287643 27886 CVE-2007-4529 URL:http://archives.neohapsis.com/archives/fulldisclosure/2007-05/0165.html  View
287644 27886 CVE-2007-4529 MISC:http://securityvulns.com/Rdocument6.html  View
287645 27886 CVE-2007-4529 BID:23935  View
287646 27886 CVE-2007-4529 URL:http://www.securityfocus.com/bid/23935  View
287647 27886 CVE-2007-4529 OSVDB:36047  View
287648 27886 CVE-2007-4529 URL:http://osvdb.org/36047  View
287649 27886 CVE-2007-4529 SECUNIA:25242  View
287650 27886 CVE-2007-4529 URL:http://secunia.com/advisories/25242  View
287651 27886 CVE-2007-4529 XF:teamspeak-webadmin-privilege-escalation(34254)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55636 JVNDB-2007-004328 Soldat game server などにおけるクライアントサービス運用妨害 (DoS) の脆弱性 Soldat game server および Soldat dedicated server には、クライアントサービス運用妨害 (クラッシュ) 状態となる脆弱性が存在します。 CVE-2007-4531 27886 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004328.html  View