Apple Time Capsule and AirPort Base Station DHCP Reply Remote Denial of Service Vulnerability
BID:45491
Info
Apple Time Capsule and AirPort Base Station DHCP Reply Remote Denial of Service Vulnerability
| Bugtraq ID: | 45491 |
| Class: | Unknown |
| CVE: |
CVE-2010-1804 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 16 2010 12:00AM |
| Updated: | Dec 16 2010 12:00AM |
| Credit: | Stefan R. Filipek. |
| Vulnerable: |
Apple Time Capsule Firmware 7.5 Apple Time Capsule Firmware 7.4.2 Apple Time Capsule Firmware 7.4.1 Apple Time Capsule 0 Apple AirPort Extreme Firmware 7.4.2 Apple AirPort Extreme Firmware 7.3.1 Apple AirPort Extreme Firmware 7.2.1 Apple AirPort Extreme Firmware 5.7 Apple AirPort Extreme Firmware 5.5 Apple AirPort Extreme Firmware 7.5 Apple AirPort Extreme Firmware 7.1 Apple AirPort Extreme Firmware 7.0 Apple AirPort Extreme Base Station with 802.11n Firmware 7.4.1 Apple AirPort Extreme Base Station 0 Apple Airport Extreme 5.4.1 Apple Airport Extreme 5.0.4 Apple Airport Extreme 5.0.3 Apple Airport Extreme 5.0.1 Apple Airport Extreme 5.4+ Apple Airport Extreme 0 Apple AirPort Express Base Station with 802.11n Firmware 7.4.1 Apple Airport Express 0 |
| Not Vulnerable: |
Apple Time Capsule Firmware 7.5.2 Apple AirPort Extreme Base Station with 802.11n Firmware 7.5.2 Apple AirPort Express Base Station with 802.11n Firmware 7.5.2 |
Discussion
Apple Time Capsule and AirPort Base Station DHCP Reply Remote Denial of Service Vulnerability
Apple Time Capsule and AirPort Base Station are prone to a remote denial-of-service vulnerability because of an implementation issue in the network bridge.
An attacker can exploit this issue to cause an affected device to stop responding to the network traffic, triggering a denial-of-service condition for legitimate users.
Apple Time Capsule and AirPort Base Station running firmware versions prior to 7.5.2 are affected.
NOTE: This issue was previously discussed in BID 45466 (Apple Time Capsule and AirPort Base Station Multiple Remote Vulnerabilities) but has been given its own record to better document it.
Apple Time Capsule and AirPort Base Station are prone to a remote denial-of-service vulnerability because of an implementation issue in the network bridge.
An attacker can exploit this issue to cause an affected device to stop responding to the network traffic, triggering a denial-of-service condition for legitimate users.
Apple Time Capsule and AirPort Base Station running firmware versions prior to 7.5.2 are affected.
NOTE: This issue was previously discussed in BID 45466 (Apple Time Capsule and AirPort Base Station Multiple Remote Vulnerabilities) but has been given its own record to better document it.
Exploit / POC
Apple Time Capsule and AirPort Base Station DHCP Reply Remote Denial of Service Vulnerability
An attacker can exploit this issue with readily available network utilities.
An attacker can exploit this issue with readily available network utilities.