CVE-2007-4529

The WebAdmin interface in TeamSpeak Server 2.0.20.1 allows remote authenticated users with the ServerAdmin flag to assign Registered users certain privileges, resulting in a privilege set that extends beyond that ServerAdmin's own servers, as demonstrated by the (1) AdminAddServer, (2) AdminDeleteServer, (3) AdminStartServer, and (4) AdminStopServer privileges; and administration of arbitrary virtual servers via a request to a .tscmd URI with a modified serverid parameter, as demonstrated by (a) add_server.tscmd, (b) ask_delete_server.tscmd, (c) start_server.tscmd, and (d) stop_server.tscmd.
Configurations

Configuration 1 (hide)

cpe:2.3:a:teamspeak:web_server:2.0.20.1:*:*:*:*:*:*:*

History

No history.

Information

Published : 2007-08-25 00:17

Updated : 2024-02-04 17:13


NVD link : CVE-2007-4529

Mitre link : CVE-2007-4529

CVE.ORG link : CVE-2007-4529


JSON object : View

Products Affected

teamspeak

  • web_server