Description
TeamSpeak 3.5.6 contains an insecure file permissions vulnerability that allows local attackers to replace executable files with malicious binaries. Attackers can replace system executables like ts3client_win32.exe with custom files to potentially gain SYSTEM or Administrator-level access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TeamSpeak | TeamSpeak | 3.5.6 | — |
References
- ExploitDB-50743 exploit
- TeamSpeak Official Vendor Homepage product
- TeamSpeak Downloads Page product
- VulnCheck Advisory: TeamSpeak 3.5.6 - Insecure File Permissions third-party-advisory