This article has been archived and is no longer updated by Apple.

About the security content of Firmware Update 7.1 for AirPort Extreme Base Station with 802.11n

This document describes the security content of Firmware Update 7.1 for AirPort Extreme Base Station with 802.11n.

For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Securitywebsite.

For information about the Apple Product Security PGP Key, see "How to use the Apple Product Security PGP Key."

Where possible, CVE IDs are used to reference the vulnerabilities for further information.

To learn about other Security Updates, see "Apple Security Updates."

Firmware Update 7.1 for AirPort Extreme Base Station with 802.11n*

AirPort Extreme Base Station with 802.11n* Firmware

CVE-ID: CVE-2007-1338

Available for: AirPort Extreme Base Station with 802.11n*

Impact: AirPort Extreme Base Station with 802.11n* allows incoming IPv6 connections

Description: The default configuration of an AirPort Extreme Base Station with 802.11n* allows incoming IPv6 connections. This may expose network services on hosts connected through an AirPort Extreme Base Station with 802.11n* to remote attackers. This update addresses the issue by changing the default setting to limit inbound IPv6 traffic to the local network. This issue only affects AirPort Extreme Base Station with 802.11n*, and not other versions of the Base Station.

The AirPort Utility is used to configure the settings of the AirPort Extreme Base Station. After installing this update and restarting your system, you should use the AirPort Utility to review the configuration of your wireless network as follows:

  • Open AirPort Utility

  • Select the AirPort Extreme Base Station with 802.11n* being configured

  • Click the "Advanced" icon

  • Click the "IPv6" tab

  • If "Block incoming IPv6 connections" is checked (selected), then inbound IPv6 traffic is limited and no further action is needed.

  • If "Block incoming IPv6 connections" is not checked (deselected), and unsolicited incoming IPv6 connections are not desired, then it should be enabled as follows:

  • Check "Block incoming IPv6 connections"

  • Click the "Update" button at the bottom of the window to save the changes

AirPort Extreme Base Station with 802.11n* Firmware

CVE-ID: CVE-2007-0734

Available for: AirPort Extreme Base Station with 802.11n*

Impact: Filenames on a password-protected AirPort Disk may be viewable to users on the local network.

Description: AirPort Disk is a feature of AirPort Extreme Base Station with 802.11n* that allows the sharing of files from a USB hard drive connected to a compatible base station. Sharing options, including password protection, are available via the AirPort Disk Utility. An issue in the AirPort Disk feature allows users on the local network to view filenames (but not their contents) on a password-protected disk without providing a password. This update addresses the issue by performing additional validation on AirPort Disk access requests. This issue only affects AirPort Extreme Base Station with 802.11n*, and not other versions of the Base Station.

Installation note for Firmware version 7.1

Firmware version 7.1 is installed into an AirPort Extreme Base Station (802.11n) by running the AirPort Utility which is provided with the Base Station.

A recent update of AirPort Utility is available via AirPort Base Station Update 2007-001, which may be obtained through Apple's Software Download site: http://www.apple.com/support/downloads/.

It is recommended that AirPort Base Station Update 2007-001 be installed before to installing Firmware version 7.1.

* Based on an IEEE 802.11n draft specification

Published Date: