CVEvulnerability
CVE-2007-3956
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-07-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
Description
TeamSpeak WebServer 2.0 for Windows does not validate parameter value lengths and does not expire TCP sessions, which allows remote attackers to cause a denial of service (CPU and memory consumption) via long username and password parameters in a request to login.tscmd on TCP port 14534.
Affected configurations
• teamspeak web server 2.0
References
- http://osvdb.org/38595 osvdb.org
- http://secunia.com/advisories/26141 secunia.com
- http://www.securityfocus.com/bid/24977 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35518 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/4205 www.exploit-db.com
- http://osvdb.org/38595 osvdb.org
- http://secunia.com/advisories/26141 secunia.com
- http://www.securityfocus.com/bid/24977 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35518 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/4205 www.exploit-db.com