Security problems

[Ciberputa]

Hi

I have a problem with TS server because someone is attacking the port I'm using. So, the host closed the port until we find any way to solve the problem.

Please, any help?

[PureGrain]

Change the ports..

[Peter]

Please disregard the "change ports" post, as anybody can find out on what port your services run, with a simple portscan.

Now,

(1) There is no known security flaw in TeamSpeak that may be abused to gain ServerAdmin rights.

(2) There are two ways that have been found the answer to the "my server has been hacked" reports:
- (a) Connecting users faking a serveradmin account "Myname (U SA) (U) is what you would see, and convincing a real admin to try and "take" this serveradmin....at which point the attacker has SA.
- (b) Much to weak passwords, that are tried by brute force. If your password is some easy english word, then it might be easy for an attacker to guess it. If the password is personal to you, and the attacker knows you, it is even easier "name_of_my_dog" or similar.

General advice is: Use the newest server version (currently 2.0.19.51, downloadable from this very forum, in the "Developer Releases" section), switch on the logging capabilities. Also give ServerAdmin (or even superadmin) to as few clients as possible, as in: not to every clan-member because it looks cool.
And if you ever find something suspicious, post the logs and all relevant info here.

[Ciberputa]

thankf for the help, Ill try to do that.

My server admin says that someone is introducing troyans in the server by the port that TS uses. Is there any way to solve it?

And I have yet upgraded to b51, but server info says that I still have the 40.

[Brain]

Did you restart the server...?

[Ciberputa]

Yes I stopped the server 40, copy the new files in another folder and start the server with the new script in the new folder.