Apple swats Airport Base Station security bugs

Apple swats Airport Base Station security bugs

Summary: Apple has rolled out a firmware update to fix a pair of security vulnerabilities in the Airport Extreme Base Station.The most serious of the two -- a weakness in the way the default configuration of Airport Extreme handles IPv6 connections -- could allow remote hackers to bypass certain access restrictions.

SHARE:
TOPICS: Security
12
Apple has rolled out a firmware update to fix a pair of security vulnerabilities in the Airport Extreme Base Station.

The most serious of the two -- a weakness in the way the default configuration of Airport Extreme handles IPv6 connections -- could allow remote hackers to bypass certain access restrictions.

"This may expose network services on hosts connected through an AirPort Extreme Base Station with 802.11n to remote attackers," Apple said in an advisory.

The second vulnerability, in the Airport Disk feature, could allow users on the local network to view filenames (but not their contents) on a password-protected disk without providing a password. AirPort Disk allows the sharing of files from a USB hard drive connected to a compatible base station. only affects AirPort Extreme Base Station with 802.11n*, and not other versions of the Base Station.

The two issues only apply to AirPort Extreme Base Station with 802.11n. Other versions of the Base Station are not affected.

These are the 63rd and 64th vulnerabilities fixed by Apple in 2007.

Topic: Security

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.

Talkback

12 comments
Log in or register to join the discussion
  • Sure glad I don't buy from Apple!!

    [i]These are the 63rd and 64th vulnerabilities fixed by Apple in 2007.[/i]

    Pathetic that they would release their products with so many vulnerabilities in them. Makes you wonder how many are still in there.
    NonZealot
    • Off you go!

      Back to the "Windows World" and start doing the same...;)
      Kid Icarus-21097050858087920245213802267493
    • Severe zealot...

      Good God fool, how many vulnerablities have been fixed in XP and other MS products since it was released versus OS X over the nearly the exact 5 years? Hundreds? Thousands? And how many have been exploited in the wild on each OS? No comparison there; 0 vs. vast number. Try not to demonstrate complete idiocy at least once in a while. Note also this is including fixes for [i]non-OS[/i] products as well.
      Neither Apple or MS is perfect - or very humble in acknowledging problems - but it's ridiculous to crow about security problems OS X or Linux/Unix - Windows/MS really are in a class of their own in creating a whole industry to find/fix/ or exploit their problems, even though MS has gotten better at security.
      rx7racer
    • You're kidding right?

      I guarantee Apple has way fewer vulnerabilities than Microsoft. The two they
      mention are very minor and it's fixed. Also fixing bugs is good instead of leaving
      known products unpatched for 2 years like Microsoft. Also, I'm not really trashing
      Microsoft because they do well with what they do. It's just that trashing Apple for
      security is pure FUD. The new Airport Extreme is state of the art in wireless
      networking, to fix two minor bugs this early after releasing the product show
      great initiative by Apple.

      You people who trash everybody over security need to wake up. Unexploited
      security problems that have been patched means that the company patching is
      doing a good job.
      MacGeek2121
    • 801.n still DRAFT

      Pathetic.....no.
      This is the evolution of a new technology that stil has no accepted standard.
      Apple is doing the work for the industry & standards.
      Think before you criticize.
      Apple does the innovation MS & others steal or mimic.
      History proves it, product after product.
      If you like rebooting your LinkSys, Cisco & other wirless routers daily then
      continue.
      But don't criticize innovators for improving thier products through the initial
      release AND continuing to support them well beyond the industry end-of-life
      standard.
      You won't find ANY other supplier providing the level of support and response
      that Apple does.
      Be sure to follow LinkSys & others releases and see if they thwart thier issues w/
      patches & adopting Apple remedies.
      First to market generates revenue to improve and develope next generation to
      stay ahead of competition. I have the previous Airport and I've NEVER had to
      reboot or power cycle ONCE since I plugged it in. Try that w/ the PC versions of
      wireless technology.
      Please keep and enjoy your world of PCs.
      Enjoy your on-line games, videos, audio, especially when you get dropped,
      reboot, dropped, reboot....
      I love you PC guys as my baby will get to go to
      Harvard from all the income it has generated for my family supporting and
      repairing thier flaws. God I love Biil Gates, Dell, HP, Compaq, Gateway, Norton.
      $$$$$$$$$$$
      My moneys w/ Apple.
      PPCG4Mac
  • Pleeease.. vista fixed 1 million b4 sold even 1

    Pleeease... vista fixed 1 million bugs b4 sold even 1 box shipped and 1 million more by the 2nd week... and expose everyones bank info weekly!! is ZDNet on Redmond Wa. payroll??? you must all be running 486 DOS machines only.. this was Microsofts only stable OS in its history!! I truly am beginning to believe your after office party's are all centered around burning crosses since your biasness is so blatant... the poor minority of apple USERS THAT DO NOT HAVE TO REINSTALL OS EVERY OTHER DAY!!! BUY ANTI-VIRUS APPS EVERY WEEK etc.etc.etc. Just for fun... how many fixes since the launch of Vista?? is their even a way to count them as quickly as they are exposed??
    jpl4
    • Apple Users

      Don't have to worry about anyone breaking into their bank accounts because after they purchased their new, shiny MAC, there's nothing left in their bank accounts.

      Ha, ha, ha!
      rkuhn040172@...
      • yup.. but by being cheap you spend 3 times more later!!

        Correct the Apples might cost 15-20% more but replacing your cheap Geo model from abc pc every 6 months and the constant frustration of attempting to make any portion of the machine work twice in a row constantly removing & disabling the mal/spy any other "ware" adds up to costing 2-3 times more.. and now that Apple has joined the "herd" and you can run "winduhs" at the same time you are on OSX and hopefully destroy just the hard drive.. after reinstalling "winduhs" at least your printer will work in OSX and your camera can download etc. etc. etc.
        jpl4
      • Go get a brain. By the time I configured a Dell

        to be as similar as possible to a Mac it landed up around the
        same price. You get what you pay for! My friends are sadly
        finding out that the purchases they made of cheap PCs were just
        what they looked like: too good to be true. Nearly all these
        people are having unbelievable trouble with their machines. My
        sister paid $2,000 for her laptop and it's always going back to
        the shop.
        labarker
      • When my Toshiba was stolen,

        insurance covered the replacement. I had paid $1600 for the Toshiba 1 year
        earlier and had already had to replace the motherboard because the video card
        had fried after 10 months. It never worked properly again after the motherboard
        swap. I replaced it with a refurbished MacBook Pro 15" with dual-core Intel (also
        for $1600), a beauteous machine that has only crashed 2 or three times on the
        Mac OS side in the 5 months since I got it and I use Mac OS for ~8 hours every
        day. I do all my online stuff on the Mac side. I dual-boot with Windows, which runs
        exactly like it did on every other PC I've used it on ... only better because I never
        take the computer online and, therefore, don't get Windows viruses. Paid the same
        ... definitely got more happiness, less frustration. Where are [i]you[/i] shopping?
        eshinee@...
  • Security fixes are GOOD! Not fixing is BAD!

    Why does every report of a security fix turn into an OS or product trashing blog? Like
    I've said before if the article is about security, it is probably FUD. This article is pretty
    much just a statement that Apple fixed a couple of minor flaws in their new state of
    the art Airport base station. The product is new and very good from what I
    understand, but I still use wired networking so what do I know? And I'm not just
    talking about Apple either. They trash Microsoft in the same way. The difference is
    that Microsoft gets exploited and Apple doesn't. Trashing anyone for fixed bugs is
    insane. Everybody has bugs. Fixing them is GOOD!
    MacGeek2121
  • I got a brain and bought a Mac - shame 'bout you

    Sure glad I don't buy from Apple!!
    These are the 63rd and 64th vulnerabilities fixed by Apple in 2007.

    Pathetic that they would release their products with so many vulnerabilities in them. Makes you wonder how many are still in there.
    Posted by: NonZealot Posted on: 04/10/07
    timpin1@...