Luigi Auriemma

Hi aluigi & others,
I tested your exploit for ts3 some weeks ago on my friends server.
My friend now got several security problems with the server (after ts3 server update).
I want to ask you if it's possible to create unintended new flaws or leave flaws on a root server with this exploit?!
Is there any potential that this exploit affects anything other than teamspeak?

Thanks for any response :)

Greetings
ilu

the fact is that the bug I found allowed to fully compromise the ts3 server software (not the server machine because it wasn't a code execution bug) so an attacker can create hidden admin accounts that he can use anytime he wants and I can't exclude other possible problems (only hypothesis) that an admin can exploit to gain access to the whole server (for example if there is a buffer-overflow in a function that only the admin can use).

your friend should delete the whole ts3 database or doing a long verification of all the user permissions