IPv6 Security Bypass in Apple AirPort Extreme Utility
CVE-2007-1338

Currently unrated

Key Information:

Vendor
Apple
Status
Airport Extreme
Vendor
CVE Published:
8 March 2007

Summary

The AirPort utility for Apple AirPort Extreme creates an IPv6 tunnel by default but fails to activate the 'Block incoming IPv6 connections' setting. This configuration flaw enables remote attackers to traverse security measures by establishing unwanted IPv6 sessions, potentially compromising network security where IPv4 connections would be denied. Ensuring proper configuration is critical to enhance the safety of the affected devices.

References

http://secunia.com/advisories/24830
third-party-advisoryx_refsource_SECUNIA
http://arstechnica.com/journals/apple.ars/2007/2/14/7063
x_refsource_MISC
http://www.vupen.com/english/advisories/2007/1308
vdb-entryx_refsource_VUPEN

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.