CVE-2009-2822
Summary
| CVE | CVE-2009-2822 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2010-04-05 16:30:00 UTC |
| Updated | 2017-08-17 01:30:00 UTC |
| Description | AirPort Utility before 5.5.1 for Apple AirPort Base Station does not properly distribute MAC address ACLs to network extenders, which allows remote attackers to bypass intended access restrictions via an 802.11 authentication frame. |
Risk And Classification
Problem Types: CWE-264
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Apple | Airport Base Station | All | All | All | All |
| Hardware | Apple | Airport Base Station | All | All | All | All |
| Application | Apple | Airport Utility | 5.0 | All | All | All |
| Application | Apple | Airport Utility | 5.3.1 | All | All | All |
| Application | Apple | Airport Utility | 5.3.2 | All | All | All |
| Application | Apple | Airport Utility | 5.4.1 | All | All | All |
| Application | Apple | Airport Utility | 5.0 | All | All | All |
| Application | Apple | Airport Utility | 5.3.1 | All | All | All |
| Application | Apple | Airport Utility | 5.3.2 | All | All | All |
| Application | Apple | Airport Utility | 5.4.1 | All | All | All |
| Application | Apple | Airport Utility | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Apple AirPort Base Station MAC Address ACL Remote Security Bypass Vulnerability | BID | www.securityfocus.com | Patch |
| 63420 | OSVDB | www.osvdb.org | |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| Apple AirPort Base Station Network Access Restriction Bypass - Advisories - Community | SECUNIA | secunia.com | Vendor Advisory |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | VUPEN | www.vupen.com | Patch, Vendor Advisory |
| About the security content of AirPort Base Station Update 2010-001 | CONFIRM | support.apple.com | Patch, Vendor Advisory |
| SecurityTracker.com Archives - Apple AirPort Base Station Lets Remote Users Access Restricted Networks | SECTRACK | securitytracker.com | |
| APPLE-SA-2010-03-31-1 AirPort Base Station Update 2010-001 | APPLE | lists.apple.com | Patch, Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.