Languages

Archived - About the security content of Firmware Update 7.1 for AirPort Extreme Base Station with 802.11n

This document describes the security content of Firmware Update 7.1 for AirPort Extreme Base Station with 802.11n.

For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website.

For information about the Apple Product Security PGP Key, see "How to use the Apple Product Security PGP Key."

Where possible, CVE IDs are used to reference the vulnerabilities for further information.

To learn about other Security Updates, see "Apple Security Updates."

This article has been archived and is no longer updated by Apple.

Firmware Update 7.1 for AirPort Extreme Base Station with 802.11n*

  • AirPort Extreme Base Station with 802.11n* Firmware

    CVE-ID: CVE-2007-1338

    Available for: AirPort Extreme Base Station with 802.11n*

    Impact: AirPort Extreme Base Station with 802.11n* allows incoming IPv6 connections

    Description: The default configuration of an AirPort Extreme Base Station with 802.11n* allows incoming IPv6 connections. This may expose network services on hosts connected through an AirPort Extreme Base Station with 802.11n* to remote attackers. This update addresses the issue by changing the default setting to limit inbound IPv6 traffic to the local network. This issue only affects AirPort Extreme Base Station with 802.11n*, and not other versions of the Base Station.

    The AirPort Utility is used to configure the settings of the AirPort Extreme Base Station. After installing this update and restarting your system, you should use the AirPort Utility to review the configuration of your wireless network as follows:

    1. Open AirPort Utility
    2. Select the AirPort Extreme Base Station with 802.11n* being configured
    3. Click the "Advanced" icon
    4. Click the "IPv6" tab

      • If "Block incoming IPv6 connections" is checked (selected), then inbound IPv6 traffic is limited and no further action is needed.
      • If "Block incoming IPv6 connections" is not checked (deselected), and unsolicited incoming IPv6 connections are not desired, then it should be enabled as follows:
        1. Check "Block incoming IPv6 connections"
        2. Click the "Update" button at the bottom of the window to save the changes

  • AirPort Extreme Base Station with 802.11n* Firmware

    CVE-ID: CVE-2007-0734

    Available for: AirPort Extreme Base Station with 802.11n*

    Impact: Filenames on a password-protected AirPort Disk may be viewable to users on the local network

    Description: AirPort Disk is a feature of AirPort Extreme Base Station with 802.11n* that allows the sharing of files from a USB hard drive connected to a compatible base station. Sharing options, including password protection, are available via the AirPort Disk Utility. An issue in the AirPort Disk feature allows users on the local network to view filenames (but not their contents) on a password-protected disk without providing a password. This update addresses the issue by performing additional validation on AirPort Disk access requests. This issue only affects AirPort Extreme Base Station with 802.11n*, and not other versions of the Base Station.

Additional Information

Installation note for Firmware version 7.1

Firmware version 7.1 is installed into an AirPort Extreme Base Station (802.11n) by running the AirPort Utility which is provided with the Base Station.

A recent update of AirPort Utility is available via AirPort Base Station Update 2007-001, which may be obtained through Apple's Software Download site: http://www.apple.com/support/downloads/.

It is recommended that AirPort Base Station Update 2007-001 be installed before to installing Firmware version 7.1.

* Based on an IEEE 802.11n draft specification

Last Modified: Nov 6, 2011
Helpful?
Yes
No
  • Last Modified: Nov 6, 2011
  • Article: HT2336
  • Views:

    4626
  • Rating:
    • 20.0

    (1 Responses)

Additional Product Support Information

Start a Discussion
in Apple Support Communities
See all questions on this article See all questions I have asked