Vulnerability CVE-2007-1338
Published: 2007-03-08   Modified: 2012-02-12

Description:
The default configuration of the AirPort utility in Apple AirPort Extreme creates an IPv6 tunnel but does not enable the "Block incoming IPv6 connections" setting, which might allow remote attackers to bypass intended access restrictions by establishing IPv6 sessions that would have been rejected over IPv4.

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
7.5/10
6.4/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
Apple -> Airport extreme 

 References:
http://www.vupen.com/english/advisories/2007/1308
http://osvdb.org/34843
http://arstechnica.com/journals/apple.ars/2007/2/14/7063
http://xforce.iss.net/xforce/xfdb/33526
http://www.securitytracker.com/id?1017889
http://secunia.com/advisories/24830
http://lists.apple.com/archives/security-announce/2007/Apr/msg00000.html
http://docs.info.apple.com/article.html?artnum=305366
Copyright 2024, cxsecurity.com

 

Back to Top