Teamspeak Versions Prior to 3.0.0-beta25 Multiple Remote Vulnerabilities
BID:40918
Info
Teamspeak Versions Prior to 3.0.0-beta25 Multiple Remote Vulnerabilities
| Bugtraq ID: | 40918 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 17 2010 12:00AM |
| Updated: | Jun 21 2010 03:38PM |
| Credit: | Luigi Auriemma |
| Vulnerable: |
Teamspeak Teamspeak 3.0.0-beta23 |
| Not Vulnerable: |
Teamspeak Teamspeak 3.0.0-beta25 |
Discussion
Teamspeak Versions Prior to 3.0.0-beta25 Multiple Remote Vulnerabilities
Teamspeak is prone to multiple remote vulnerabilities, including:
1. A security-pass vulnerability
2. A denial-of-service vulnerability
3. Multiple denial-of-service vulnerabilities due to a NULL-pointer dereference condition.
An attacker can exploit these issues to execute arbitrary commands within the context of the affected application, bypass certain security restrictions and crash the affected application. Other attacks are also possible.
Versions prior to TeamSpeak 3.0.0-beta25 are vulnerable.
Teamspeak is prone to multiple remote vulnerabilities, including:
1. A security-pass vulnerability
2. A denial-of-service vulnerability
3. Multiple denial-of-service vulnerabilities due to a NULL-pointer dereference condition.
An attacker can exploit these issues to execute arbitrary commands within the context of the affected application, bypass certain security restrictions and crash the affected application. Other attacks are also possible.
Versions prior to TeamSpeak 3.0.0-beta25 are vulnerable.
Exploit / POC
Teamspeak Versions Prior to 3.0.0-beta25 Multiple Remote Vulnerabilities
To exploit these issues, attackers may use readily available network tools.
The following exploit code is available:
To exploit these issues, attackers may use readily available network tools.
The following exploit code is available:
Solution / Fix
Teamspeak Versions Prior to 3.0.0-beta25 Multiple Remote Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Teamspeak Versions Prior to 3.0.0-beta25 Multiple Remote Vulnerabilities
References:
References:
- TeamSpeak 3 Multiple Vulnerabilities (Luigi Auriemma)
- TeamSpeak 3.0.0-beta25 Release Notes (TeamSpeak)
- TeamSpeak Bug Report 443989 (TeamSpeak)
- Teamspeak Homepage (Teamspeak)