PT-2007-2740 · Apple · Airport Extreme

Published 2007-03-07 · Updated 2017-07-29 · CVE-2007-1338

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apple AirPort Extreme (affected versions not specified)

Description The default configuration of the AirPort utility creates an IPv6 tunnel but does not enable the "Block incoming IPv6 connections" setting. This might allow remote attackers to bypass intended access restrictions by establishing IPv6 sessions that would have been rejected over IPv4.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2007-1338

Affected Products

Airport Extreme

References · 9

• http://lists.apple.com/archives/security-announce/2007/Apr/msg00000.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-1338 · Security Note
• http://secunia.com/advisories/24830 · Note
• http://osvdb.org/34843 · Note
• http://arstechnica.com/journals/apple.ars/2007/2/14/7063 · Note
• http://securitytracker.com/id?1017889 · Note
• http://vupen.com/english/advisories/2007/1308 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33526 · Note
• http://docs.info.apple.com/article.html?artnum=305366 · Note