CVE-2007-3956: Teamspeak Web Server

High severity, CVSS 7.8. EPSS: 8.1% chance of exploitation in the next 30 days.

TeamSpeak WebServer 2.0 for Windows does not validate parameter value lengths and does not expire TCP sessions, which allows remote attackers to cause a denial of service (CPU and memory consumption) via long username and password parameters in a request to login.tscmd on TCP port 14534.

Affected products

• Teamspeak Web Server: version 2.0 only

Published 2007-07-24. Last modified 2026-06-16.