PT-2007-2740 · Apple · Airport Extreme

Publicado 2007-03-07 · Atualizado 2017-07-29 · CVE-2007-1338

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apple AirPort Extreme (affected versions not specified)

Description The default configuration of the AirPort utility creates an IPv6 tunnel but does not enable the "Block incoming IPv6 connections" setting. This might allow remote attackers to bypass intended access restrictions by establishing IPv6 sessions that would have been rejected over IPv4.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2007-1338

Produtos afetados

Airport Extreme

Referências · 9

• http://secunia.com/advisories/24830 · Nota
• http://lists.apple.com/archives/security-announce/2007/Apr/msg00000.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-1338 · Nota de Segurança
• http://osvdb.org/34843 · Nota
• http://arstechnica.com/journals/apple.ars/2007/2/14/7063 · Nota
• http://securitytracker.com/id?1017889 · Nota
• http://vupen.com/english/advisories/2007/1308 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33526 · Nota
• http://docs.info.apple.com/article.html?artnum=305366 · Nota