April 09, 2007

Apple offers AirPort Base Station security fix

Firmware updates patch a flaw that prevented the router from acting as a firewall as well as a flaw that could let an attacker view filenames on a connected USB hard drive

Apple has published a firmware update for its Airport Extreme Base Station that fixes two security flaws in the Wi-Fi router.

The patch fixes a bug found in certain versions of the Base Station that prevented the router from acting as a firewall by blocking IPv6 traffic by default. "This may expose network services on hosts connected through an AirPort Extreme Base Station with 802.11n to remote attacks," Apple said in a Monday advisory.

Both of the bugs, patched in version 7.1 of the product's firmware, affect only the 802.11n versions of the router, Apple said.

The second Base Station flaw could let an attacker view filenames -- but not file contents -- on a password-protected USB hard drive connected to the Base Station via the AirPort Disk feature.

Apple recommends that users download the latest version of the AirPort software on their computers before installing the router's firmware update. Windows and Mac versions of the latest Base Station updates can be found here.

Subscribe to the Security Central Newsletter

The one-stop resource center for IT professionals.

White Paper

CA Security Management Solutions

A comprehensive security management solution can help you streamline, as well as grow, your current or evolving business. In this way, a strategic security approach can help you increase your competitiveness in these challenging market conditions.

Download now! »

White paper

Beyond Compliance: The Significant Benefits of Log Management

Find out how you can effectively collect, normalize and archive enterprise-wide, security-related data that is invaluable for security investigation and compliance reporting.

Download now! »

Webcast

Integrated Identity Compliance: Enabling Cost-Effective Role-Based Compliance

This session focuses on the intersection of role management and identity compliance, and addresses the importance of identity compliance in enterprise governance and the challenges that organizations may face in achieving it.

View now! »
©1994-2009 Infoworld, Inc.