CVEvulnerability
CVE-2007-1338
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-03-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
The default configuration of the AirPort utility in Apple AirPort Extreme creates an IPv6 tunnel but does not enable the "Block incoming IPv6 connections" setting, which might allow remote attackers to bypass intended access restrictions by establishing IPv6 sessions that would have been rejected over IPv4.
Affected configurations
• apple airport extreme 7.1
References
- http://arstechnica.com/journals/apple.ars/2007/2/14/7063 arstechnica.com
- http://docs.info.apple.com/article.html?artnum=305366 docs.info.apple.com
- http://lists.apple.com/archives/security-announce/2007/Apr/msg00000.html lists.apple.com
- http://osvdb.org/34843 osvdb.org
- http://secunia.com/advisories/24830 secunia.com
- http://www.securitytracker.com/id?1017889 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/1308 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33526 exchange.xforce.ibmcloud.com
- http://arstechnica.com/journals/apple.ars/2007/2/14/7063 arstechnica.com
- http://docs.info.apple.com/article.html?artnum=305366 docs.info.apple.com
- http://lists.apple.com/archives/security-announce/2007/Apr/msg00000.html lists.apple.com
- http://osvdb.org/34843 osvdb.org
- http://secunia.com/advisories/24830 secunia.com
- http://www.securitytracker.com/id?1017889 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/1308 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33526 exchange.xforce.ibmcloud.com