Apple's AirPort Extreme can pose security risk
[author:zyk06 Public time:Apr 11, 2007] |
|
Apple on Monday released a software update that addresses a pair of security problems in the company's latest AirPort Extreme base station.
The update, available for download from Apple's Web site, tightens the default configuration of the AirPort Extreme Base Station with 802.11n, Apple said in a security alert. The update also fixes a security flaw that exposes file names on a password-protected disk attached to the device, Apple said.
The default configuration of the Apple base station allows incoming IPv6 connections. This may expose network services on hosts connected to the device to remote attackers, Apple said. IPv6 is the next version of the Internet Protocol designed to support a broader range of IP addresses as the IP version 4 addresses currently in use become scarce.
"This update addresses the issue by changing the default setting to limit inbound IPv6 traffic to the local network," the Mac maker said.
The second issue relates to AirPort Disk, a feature of which allows network users to share storage space on a USB disk connected to the base station. Airport Disk has a password protection feature, but that doesn't protect file names, Apple said.
"An issue in the AirPort Disk feature allows users on the local network to view file names--but not their contents--on a password-protected disk without providing a password," Apple said. The software update fixes that problem, the company said.
Both issues only affect the AirPort Extreme Base Station with 802.11n, a wireless router Apple introduced in January at Macworld in San Francisco. The software download, which updates the device's firmware, can be installed through the Airport Utility.
Author: Joris Evers
source: http://news.zdnet.com/
Printed From:http://www.free-press-release.com/news/200704/1176290328.html
Source:Free Press Release
Similar news >>
Botnet Targets iPhone Buyers [Jul 15, 2007]
Apple's big game hunt: Safari aims to lure Windows users [Jun 14, 2007]
iPhone users will be required to launch an iTunes account to set-up their phone [Jun 13, 2007]
Apple's AirPort Extreme can pose security risk [Apr 11, 2007]
Apple Tries to Plug Holes in Mac OS X Security [Mar 15, 2007]
Apple releases patches for 'critical' iTunes, QuickTime flaws [Mar 6, 2007]
FutureBazaar Partners with AppLabs Technologies for Security Testing [Feb 15, 2007]
Nike + iPod poses threat to personal security [Dec 4, 2006]
Information Security Courses from Appin Knowledge Solutions [Sep 12, 2006]
Appin Information Security & Ethical Hacking – The most innovative training products released. [Jul 7, 2006]
|
|
