CVE-2007-3956

EPSS 8.1%

TeamSpeak WebServer 2.0 for Windows does not validate parameter value lengths and does not expire TCP sessions, which allows remote attackers to cause a denial of service (CPU and memory consumption) via long username and password parameters in a request to login.tscmd on TCP port 14534.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/4205unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/38595 http://secunia.com/advisories/26141 https://exchange.xforce.ibmcloud.com/vulnerabilities/35518 https://www.exploit-db.com/exploits/4205 http://www.securityfocus.com/bid/24977