Apple Time Capsule and AirPort Base Station (CVE-2009-2189) Remote Denial of Service Vulnerability
BID:45490
Info
Apple Time Capsule and AirPort Base Station (CVE-2009-2189) Remote Denial of Service Vulnerability
| Bugtraq ID: | 45490 |
| Class: | Unknown |
| CVE: |
CVE-2009-2189 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 16 2010 12:00AM |
| Updated: | Dec 16 2010 12:00AM |
| Credit: | Shoichi Sakane of the KAME project, Kanai Akira of Internet Multifeed Co., Shirahata Shin and Rodney Van Meter of Keio University, and Tatuya Jinmei of Internet Systems Consortium, Inc. |
| Vulnerable: |
Apple Time Capsule Firmware 7.5 Apple Time Capsule Firmware 7.4.2 Apple Time Capsule Firmware 7.4.1 Apple Time Capsule 0 Apple AirPort Extreme Firmware 7.4.2 Apple AirPort Extreme Firmware 7.3.1 Apple AirPort Extreme Firmware 7.2.1 Apple AirPort Extreme Firmware 5.7 Apple AirPort Extreme Firmware 5.5 Apple AirPort Extreme Firmware 7.5 Apple AirPort Extreme Firmware 7.1 Apple AirPort Extreme Firmware 7.0 Apple AirPort Extreme Base Station with 802.11n Firmware 7.4.1 Apple AirPort Extreme Base Station 0 Apple Airport Extreme 5.4.1 Apple Airport Extreme 5.0.4 Apple Airport Extreme 5.0.3 Apple Airport Extreme 5.0.1 Apple Airport Extreme 5.4+ Apple Airport Extreme 0 Apple AirPort Express Base Station with 802.11n Firmware 7.4.1 Apple Airport Express 0 |
| Not Vulnerable: |
Apple Time Capsule Firmware 7.5.2 Apple AirPort Extreme Base Station with 802.11n Firmware 7.5.2 Apple AirPort Express Base Station with 802.11n Firmware 7.5.2 |
Discussion
Apple Time Capsule and AirPort Base Station (CVE-2009-2189) Remote Denial of Service Vulnerability
Apple Time Capsule and AirPort Base Station are prone to a remote denial-of-service vulnerability when handling an overly large quantity of Router Advertisement (RA) and Neighbor Discovery (ND) packets.
An attacker can exploit this issue to cause an affected device to restart, triggering a denial-of-service condition for legitimate users.
Apple Time Capsule and AirPort Base Station running firmware versions prior to 7.5.2 are affected.
NOTE: This issue was previously discussed in BID 45466 (Apple Time Capsule and AirPort Base Station Multiple Remote Vulnerabilities) but has been given its own record to better document it.
Apple Time Capsule and AirPort Base Station are prone to a remote denial-of-service vulnerability when handling an overly large quantity of Router Advertisement (RA) and Neighbor Discovery (ND) packets.
An attacker can exploit this issue to cause an affected device to restart, triggering a denial-of-service condition for legitimate users.
Apple Time Capsule and AirPort Base Station running firmware versions prior to 7.5.2 are affected.
NOTE: This issue was previously discussed in BID 45466 (Apple Time Capsule and AirPort Base Station Multiple Remote Vulnerabilities) but has been given its own record to better document it.
References
Apple Time Capsule and AirPort Base Station (CVE-2009-2189) Remote Denial of Service Vulnerability
References:
References: