PT-2005-1367 · Apple · Airport Express+1

Dylan Griffiths · Published 2005-02-10 · Updated 2017-07-11 · CVE-2005-0289

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Apple AirPort Express versions prior to 6.1.1 Apple AirPort Extreme versions prior to 5.5.1

Description The issue allows remote attackers to cause a denial of service, resulting in a device freeze. This can be achieved by connecting to UDP port 161 before a link-state change occurs, specifically when the devices are configured as a Wireless Data Service (WDS).

Recommendations For Apple AirPort Express versions prior to 6.1.1, update to version 6.1.1 or later to resolve the issue. For Apple AirPort Extreme versions prior to 5.5.1, update to version 5.5.1 or later to resolve the issue.

Fix

Related Identifiers

CVE-2005-0289

Affected Products

Airport Express

Airport Extreme

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2005-0289 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18865 · Note
• http://securityfocus.com/bid/12152 · Note
• http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030832.html · Note
• http://marc.info/?l=bugtraq&m=110582124528867&w=2 · Note
• http://secunia.com/advisories/13753 · Note