RETIRED: Apple Time Capsule and AirPort Base Station Multiple Remote Vulnerabilities
BID:45466
Info
RETIRED: Apple Time Capsule and AirPort Base Station Multiple Remote Vulnerabilities
| Bugtraq ID: | 45466 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 16 2010 12:00AM |
| Updated: | Dec 17 2010 08:34PM |
| Credit: | Shoichi Sakane of the KAME project, Kanai Akira of Internet Multifeed, Co., Shirahata Shin and Rodney Van Meter of Keio University, Tatuya Jinmei of Internet Systems Consortium, Inc., Sabahattin Gucukoglu, and Stefan R. Filipek |
| Vulnerable: |
Apple Time Capsule Firmware 7.5 Apple Time Capsule Firmware 7.4.2 Apple Time Capsule Firmware 7.4.1 Apple Time Capsule 0 Apple AirPort Extreme Firmware 7.4.2 Apple AirPort Extreme Firmware 7.3.1 Apple AirPort Extreme Firmware 7.2.1 Apple AirPort Extreme Firmware 5.7 Apple AirPort Extreme Firmware 5.5 Apple AirPort Extreme Firmware 7.5 Apple AirPort Extreme Firmware 7.1 Apple AirPort Extreme Firmware 7.0 Apple AirPort Extreme Base Station with 802.11n Firmware 7.4.1 Apple AirPort Extreme Base Station 0 Apple Airport Extreme 0 Apple AirPort Express Base Station with 802.11n Firmware 7.4.1 Apple Airport Express 0 |
| Not Vulnerable: |
Apple Time Capsule Firmware 7.5.2 Apple AirPort Extreme Base Station with 802.11n Firmware 7.5.2 Apple AirPort Express Base Station with 802.11n Firmware 7.5.2 |
Discussion
RETIRED: Apple Time Capsule and AirPort Base Station Multiple Remote Vulnerabilities
Apple Time Capsule and AirPort Base Station is prone to multiple remote vulnerabilities.
An attacker can exploit these issues to cause a denial-of-service condition and bypass certain security restrictions. Other attacks are also possible.
Apple Time Capsule and AirPort Base Station running firmware versions prior to 7.5.2 are affected.
This BID is being retired. The following individual records exist to better document the issues:
45489 Apple Time Capsule and AirPort Base Station Malformed 'PORT' Command Security Bypass Vulnerability
45490 Apple Time Capsule and AirPort Base Station (CVE-2009-2189) Remote Denial of Service Vulnerability
45491 Apple Time Capsule and AirPort Base Station DHCP Reply Remote Denial of Service Vulnerability
Apple Time Capsule and AirPort Base Station is prone to multiple remote vulnerabilities.
An attacker can exploit these issues to cause a denial-of-service condition and bypass certain security restrictions. Other attacks are also possible.
Apple Time Capsule and AirPort Base Station running firmware versions prior to 7.5.2 are affected.
This BID is being retired. The following individual records exist to better document the issues:
45489 Apple Time Capsule and AirPort Base Station Malformed 'PORT' Command Security Bypass Vulnerability
45490 Apple Time Capsule and AirPort Base Station (CVE-2009-2189) Remote Denial of Service Vulnerability
45491 Apple Time Capsule and AirPort Base Station DHCP Reply Remote Denial of Service Vulnerability
Exploit / POC
RETIRED: Apple Time Capsule and AirPort Base Station Multiple Remote Vulnerabilities
An attacker can use readily available network utilities to exploit these issues.
An attacker can use readily available network utilities to exploit these issues.
Solution / Fix
RETIRED: Apple Time Capsule and AirPort Base Station Multiple Remote Vulnerabilities
Solution:
Vendor updates are available. Please see the references for more information.
Solution:
Vendor updates are available. Please see the references for more information.
References
RETIRED: Apple Time Capsule and AirPort Base Station Multiple Remote Vulnerabilities
References:
References:
- Apple Homepage (Apple)