CVE-2007-4529 Privilege escalation in n/a
Authenticated ServerAdmins can escalate privileges to manage arbitrary virtual servers beyond their assigned scope via the WebAdmin interface.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2007-4529?
CVE-2007-4529 is a high-severity vulnerability in n/a, published on 25 Aug 2007. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
The WebAdmin interface in TeamSpeak Server 2.0.20.1 allows remote authenticated users with the ServerAdmin flag to assign Registered users certain privileges, resulting in a privilege set that extends beyond that ServerAdmin's own servers, as demonstrated by the (1) AdminAddServer, (2) AdminDeleteServer, (3) AdminStartServer, and (4) AdminStopServer privileges; and administration of arbitrary virtual servers via a request to a .tscmd URI with a modified serverid parameter, as demonstrated by (a) add_server.tscmd, (b) ask_delete_server.tscmd, (c) start_server.tscmd, and (d) stop_server.tscmd.
Which versions are affected by CVE-2007-4529?
It affects 1 product.
Products include Teamspeak Web Server.
How do I fix CVE-2007-4529?
No fix has been published for CVE-2007-4529 yet. Limit exposure of the affected software until one is available.
Is CVE-2007-4529 being exploited?
There is no known exploitation of CVE-2007-4529 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-gxjq-gw5j-w87m.