Apple Time Capsule and AirPort Base Station Malformed 'PORT' Command Security Bypass Vulnerability
BID:45489
Info
Apple Time Capsule and AirPort Base Station Malformed 'PORT' Command Security Bypass Vulnerability
| Bugtraq ID: | 45489 |
| Class: | Unknown |
| CVE: |
CVE-2010-0039 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 16 2010 12:00AM |
| Updated: | Dec 16 2010 12:00AM |
| Credit: | Sabahattin Gucukoglu |
| Vulnerable: |
Apple Time Capsule Firmware 7.5 Apple Time Capsule Firmware 7.4.2 Apple Time Capsule Firmware 7.4.1 Apple Time Capsule 0 Apple AirPort Extreme Firmware 7.4.2 Apple AirPort Extreme Firmware 7.3.1 Apple AirPort Extreme Firmware 7.2.1 Apple AirPort Extreme Firmware 5.7 Apple AirPort Extreme Firmware 5.5 Apple AirPort Extreme Firmware 7.5 Apple AirPort Extreme Firmware 7.1 Apple AirPort Extreme Firmware 7.0 Apple AirPort Extreme Base Station with 802.11n Firmware 7.4.1 Apple AirPort Extreme Base Station 0 Apple Airport Extreme 5.4.1 Apple Airport Extreme 5.0.4 Apple Airport Extreme 5.0.3 Apple Airport Extreme 5.0.1 Apple Airport Extreme 5.4+ Apple Airport Extreme 0 Apple AirPort Express Base Station with 802.11n Firmware 7.4.1 Apple Airport Express 0 |
| Not Vulnerable: |
Apple Time Capsule Firmware 7.5.2 Apple AirPort Extreme Base Station with 802.11n Firmware 7.5.2 Apple AirPort Express Base Station with 802.11n Firmware 7.5.2 |
Discussion
Apple Time Capsule and AirPort Base Station Malformed 'PORT' Command Security Bypass Vulnerability
Apple Time Capsule and AirPort Base Station are prone to a security bypass vulnerability.
An attacker can exploit this issue to bypass certain security restrictions and access data of an IP address and port behind the NAT.
Apple Time Capsule and AirPort Base Station running firmware versions prior to 7.5.2 are affected.
NOTE: This issue was previously discussed in BID 45466 (Apple Time Capsule and AirPort Base Station Multiple Remote Vulnerabilities) but has been given its own record to better document it.
Apple Time Capsule and AirPort Base Station are prone to a security bypass vulnerability.
An attacker can exploit this issue to bypass certain security restrictions and access data of an IP address and port behind the NAT.
Apple Time Capsule and AirPort Base Station running firmware versions prior to 7.5.2 are affected.
NOTE: This issue was previously discussed in BID 45466 (Apple Time Capsule and AirPort Base Station Multiple Remote Vulnerabilities) but has been given its own record to better document it.
Exploit / POC
Apple Time Capsule and AirPort Base Station Malformed 'PORT' Command Security Bypass Vulnerability
An attacker can use readily available network utilities to exploit this issue.
An attacker can use readily available network utilities to exploit this issue.
Solution / Fix
Apple Time Capsule and AirPort Base Station Malformed 'PORT' Command Security Bypass Vulnerability
Solution:
Vendor updates are available. Please see the references for more information.
Solution:
Vendor updates are available. Please see the references for more information.
References
Apple Time Capsule and AirPort Base Station Malformed 'PORT' Command Security Bypass Vulnerability
References:
References: