Apple AirPort Remote Denial of Service Vulnerability

Bugtraq ID:	16146
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2005-3714
Remote:	Yes
Local:	No
Published:	Jan 05 2006 12:00AM
Updated:	Jan 05 2006 12:00AM
Credit:	Discovered by Michael Zanetta.
Vulnerable:	Apple AirPort Extreme Firmware 5.5 Apple AirPort Express Firmware 6.1
Not Vulnerable:	Apple AirPort Extreme Firmware 5.7 Apple AirPort Express Firmware 6.3

Apple AirPort Remote Denial of Service Vulnerability

Apple AirPort firmware is prone to a denial of service condition. This occurs when the device handles malformed packets.

Specific details regarding this issue are not currently known. This record will be updated when more information becomes available.

AirPort Express firmware versions prior to 6.3 and AirPort Extreme firmware versions prior to 5.7 are vulnerable.

Apple AirPort Remote Denial of Service Vulnerability

An exploit is not required.

Apple AirPort Remote Denial of Service Vulnerability

Solution:
Apple has released advisory APPLE-SA-2006-01-05 and fixes to address this issue:


Apple AirPort Extreme Firmware 5.5

• Apple AirPort Extreme Firmware Update 5.7 for Mac OS X
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=09301&cat= 1&platform=osx&method=sa/AirPortExtremeFWUpdater.dmg


• Apple AirPort Extreme Firmware Update 5.7 for Windows
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=09303&cat= 1&platform=osx&method=sa/AirPortExtremeFWUpdater.exe

Apple AirPort Express Firmware 6.1

• Apple AirPort Express Firmware Update 6.3 for Mac OS X
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=09302&cat= 1&platform=osx&method=sa/AirPortExpressFWUpdater.dmg


• Apple AirPort Express Firmware Update 6.3 for Windows
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=09304&cat= 1&platform=osx&method=sa/AirPortExpressFWUpdater.exe

Apple AirPort Remote Denial of Service Vulnerability

References:

• AirPort Product Page (Apple)
  
• AirPort Support (Apple)