----------------------------------------------------------------------

Secunia customers receive relevant and filtered advisories.
Delivery is done via different channels including SMS, Email, Web,
and https based XML feed.
http://corporate.secunia.com/trial/38/request/

----------------------------------------------------------------------

TITLE:
Apple AirPort Extreme Base Station Two Weaknesses

SECUNIA ADVISORY ID:
SA24830

VERIFY ADVISORY:
http://secunia.com/advisories/24830/

CRITICAL:
Less critical

IMPACT:
Security Bypass, Exposure of system information, Exposure of
sensitive information

WHERE:
>From remote

OPERATING SYSTEM:
Apple Airport Extreme
http://secunia.com/product/4504/

DESCRIPTION:
Two weaknesses have been reported in Apple AirPort Extreme Base
Station, which can be exploited by malicious people to bypass certain
security restrictions or to disclose certain sensitive information.

1) An AirPort Extreme Base Station with 802.11n allows incoming IPv6
connections in the default configuration where the option "Block
incoming IPv6 connections" is not selected.

2) An unspecified error in the AirPort Disk Feature of AirPort
Extreme Base Stations with 802.11n can be exploited to disclose
filenames on password-protected disks.

Successful exploitation of weakness #2 requires access to the local
network.

SOLUTION:
Update to firmware version 7.1.
http://www.apple.com/support/downloads/airportextremebasestationwith80211nfirmware71.html

PROVIDED AND/OR DISCOVERED BY:
1) Iljitsch van Beijnum
2) Reported by the vendor

ORIGINAL ADVISORY:
Apple:
http://docs.info.apple.com/article.html?artnum=305366

1) http://arstechnica.com/journals/apple.ars/2007/2/14/7063

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------