Apple Mac OS X AirPort Card Automatic Network Association Vulnerability

Bugtraq ID:	14321
Class:	Design Error
CVE:	CVE-2005-2196
Remote:	Yes
Local:	No
Published:	Jul 19 2005 12:00AM
Updated:	Jul 12 2009 04:06PM
Credit:	Discovery is credited to Dino Dai Zovi.
Vulnerable:	Apple Mac OS X 10.4.1 Apple Mac OS X 10.4 Apple Mac OS X 10.3.9 Apple Mac OS X 10.3.8 Apple Mac OS X 10.3.7 Apple Mac OS X 10.3.6 Apple Mac OS X 10.3.5 Apple Mac OS X 10.3.4 Apple Mac OS X 10.3.3
Not Vulnerable:	Apple Mac OS X 10.4.2

Apple Mac OS X AirPort Card Automatic Network Association Vulnerability

Apple Mac OS X is affected by a vulnerability that may cause a computer to connect to a potentially malicious network without prior notification.

This can lead to various attacks against the affected computer.

This issue does not affect AirPort Extreme.

Apple Mac OS X AirPort Card Automatic Network Association Vulnerability

An exploit is not required.

Apple Mac OS X AirPort Card Automatic Network Association Vulnerability

Solution:
Apple has released an advisory (APPLE-SA-2005-07-19) with fixes to address this issue. Please see the referenced advisory for more information.

Apple Mac OS X AirPort Card Automatic Network Association Vulnerability

References:

• AirPort Product Page (Apple)
  
• AirPort Support (Apple)