Unsecured Calls, 5.0

New with iOS 5, the “unsecured call” call warning seems like a direct response to presentations like “Practical Cellphone Spying” at DEFCON, which demonstrated the ability of attackers to set up a phony GSM base station and intercept cellphone calls. iPhone users who are communicating over an...

Command injection

The Application-Level Gateway ALG on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 modifies PORT commands in incoming FTP traffic, which allows remote attackers to use the device's IP address for arbitrary intranet TCP traffic by...

CVE-2010-1804

CVE-2010-1804 affects Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware

CVE-2010-0039: Undefined Security Weakness

The Application-Level Gateway ALG on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 modifies PORT commands in incoming FTP traffic, which allows remote attackers to use the device's IP address for arbitrary intranet TCP traffic by...

CVE-2009-2189: Undefined Security Weakness

The ICMPv6 implementation on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 does not limit the rate of 1 Router Advertisement and 2 Neighbor Discovery packets, which allows remote attackers to cause a denial of service resource...

CVE-2010-1804: Undefined Security Weakness

Unspecified vulnerability in the network bridge functionality on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 allows remote attackers to cause a denial of service networking outage via a crafted DHCP reply...

Apple Time Capsule and AirPort Base Station Firmware < 7.5.2 (APPLE-SA-2010-12-16-1)

According to the firmware version collected via SNMP, the remote Apple Time Capsule / AirPort Base Station / AirPort Extreme Base Station is affected by multiple remote vulnerabilities. - An integer overflow exists in the 'netsnmpcreatesubtreecache' function that can be exploited using a speciall...

CVE-2009-2822

AirPort Utility before 5.5.1 for Apple AirPort Base Station does not properly distribute MAC address ACLs to network extenders, which allows remote attackers to bypass intended access restrictions via an 802.11 authentication frame...

CVE-2009-2822

CVE-2009-2822 affects Apple AirPort Utility prior to 5.5.1. The issue is that MAC address ACLs are not properly distributed to network extenders, allowing a remote attacker to bypass access restrictions by sending an 802.11 authentication frame. Affected products include AirPort Utility versions ...

CVE-2009-2822

AirPort Utility before 5.5.1 for Apple AirPort Base Station does not properly distribute MAC address ACLs to network extenders, which allows remote attackers to bypass intended access restrictions via an 802.11 authentication frame...

Apple Plugs Gaping Holes in QuickTime, iTunes

Just call it Mac OS X patchapalooza. Over the last week, Apple has shipped security patches to cover 88 vulnerabilities in the Mac operating system, 16 holes in the QuickTime media player, 7 flaws in iTunes and a security bug in the AirPort Base Station. In the days following the release of the M...

DECT Base Station Scanner

This module scans for DECT base stations This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'DECT Base Station Scanner', 'Description' = 'This module scans for DECT base stations', 'Author' = 'DK '...

CVE-2008-1542: Undefined Security Weakness

Airspan Base Station Distribution Unit BSDU has "topsecret" as its password for the root account, which allows remote attackers to obtain administrative access via a telnet login, a different vulnerability than CVE-2008-1262...

AirSpan Base Station Distribution Unit default root password

Overview AirSpan Base Station Distribution Units may contain an undocumented telnet server that authenticates via a known password and is enabled by default. Description From the AirSpan MicroMax product page:The base station is highly modular in design and is composed of two main components: the...

Apple AirPort Extreme Base Station AFP请求拒绝服务漏洞

BUGTRAQ ID: 28348 CVECAN ID: CVE-2008-1012 Apple AirPort Extreme Base Station是一款小型的无线接入解决方案。 Apple AirPort Extreme Base Station在处理畸形请求时存在漏洞，如果向设备发送了特制的AFP请求的话，就会导致文件共享变得没有响应。 Apple AirPort Base Station 7.3.1 Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.apple.com...

Input validation

Unspecified vulnerability in Apple AirPort Extreme Base Station Firmware 7.3.1 allows remote attackers to cause a denial of service file sharing hang via a crafted AFP request, related to "input validation."...

CVE-2008-1012

Unspecified vulnerability in Apple AirPort Extreme Base Station Firmware 7.3.1 allows remote attackers to cause a denial of service file sharing hang via a crafted AFP request, related to "input validation."...

CVE-2008-1012

The CVE-2008-1012 issue affects Apple AirPort Extreme Base Station Firmware 7.3.1, where the AFP protocol handler fails input validation on malformed requests. The vulnerability allows remote attackers to trigger a denial of service, causing the file sharing service to hang. Affected component: A...

CVE-2008-1012

Unspecified vulnerability in Apple AirPort Extreme Base Station Firmware 7.3.1 allows remote attackers to cause a denial of service file sharing hang via a crafted AFP request, related to "input validation."...

CVE-2008-1012: Improper Input Validation

Unspecified vulnerability in Apple AirPort Extreme Base Station Firmware 7.3.1 allows remote attackers to cause a denial of service file sharing hang via a crafted AFP request, related to "input validation."...