CVSS: 2.6EPSS: 0%CPEs: 12EXPL: 0CVE-2010-0039
https://notcve.org/view.php?id=CVE-2010-0039
The Application-Level Gateway (ALG) on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 modifies PORT commands in incoming FTP traffic, which allows remote attackers to use the device's IP address for arbitrary intranet TCP traffic by leveraging write access to an intranet FTP server. Application-Level Gateway (ALG) en Apple Time Capsule, AirPort Extreme Base Station, y AirPort Express Base Station con firmware anterior v7.5.2 modifica los comandos PORT en el tráfico FTP, lo que permite a atacantes remotos usar la dirección IP del dispositivo para tráfico de intranet TCP de su elección aprovechando el acceso de escritura en el servidor FTP de intranet. • http://lists.apple.com/archives/security-announce/2010//Dec/msg00001.html http://support.apple.com/kb/HT4298 http://www.securitytracker.com/id?1024907 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.1EPSS: 0%CPEs: 12EXPL: 0CVE-2010-1804
https://notcve.org/view.php?id=CVE-2010-1804
Unspecified vulnerability in the network bridge functionality on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 allows remote attackers to cause a denial of service (networking outage) via a crafted DHCP reply. Vulnerabilidad no especificada en la funcionalidad network bridge en Apple Time Capsule, AirPort Extreme Base Station, y AirPort Express Base Station con firmware anterior a v7.5.2 permite a los atacantes remotos causar una denegcaión de servicio (desconexión de red) a través de peticiones DHCP manipuladas. • http://lists.apple.com/archives/security-announce/2010//Dec/msg00001.html http://support.apple.com/kb/HT4298 http://www.securitytracker.com/id?1024907 •
CVSS: 6.1EPSS: 0%CPEs: 12EXPL: 0CVE-2009-2189
https://notcve.org/view.php?id=CVE-2009-2189
The ICMPv6 implementation on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 does not limit the rate of (1) Router Advertisement and (2) Neighbor Discovery packets, which allows remote attackers to cause a denial of service (resource consumption and device restart) by sending many packets. La implementación ICMPv6 en Apple Time Capsule, AirPort Extreme Base Station, y AirPort Express Base Station con firmware anterior a v7.5.2 no limita la tasa de paquetes (1) Router Advertisement y (2) Neighbor Discovery, lo cual permite a los atacantes remotos causar una denegación de servicio (consumo de recursos y reinicio del dispositivo) a través del envío de muchos paquetes. • http://lists.apple.com/archives/security-announce/2010//Dec/msg00001.html http://support.apple.com/kb/HT4298 http://www.securitytracker.com/id?1024907 • CWE-399: Resource Management Errors •
CVSS: 5.4EPSS: 0%CPEs: 12EXPL: 0CVE-2007-0734
https://notcve.org/view.php?id=CVE-2007-0734
fsck, as used by the AirPort Disk feature of the AirPort Extreme Base Station with 802.11n before Firmware Update 7.1, and by Apple Mac OS X 10.3.9 through 10.4.9, does not properly enforce password protection of a USB hard drive, which allows context-dependent attackers to list arbitrary directories or execute arbitrary code, resulting from memory corruption. fsck, tal y como es usada por la funcionalidad AirPort Disk de la AirPort Extreme Base Station con 802.11n anteriores a Firmware Update 7.1, y por Apple Mac OS X versiones 10.3.9 hasta 10.4.9, no aplica correctamente la protección de contraseña de un disco duro USB, lo que permite a atacantes dependiendo del contexto enumerar directorios arbitrarios o ejecutar código arbitrario, como resultado de una corrupción de memoria. • http://docs.info.apple.com/article.html?artnum=305366 http://docs.info.apple.com/article.html?artnum=305391 http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html http://lists.apple.com/archives/security-announce/2007/Apr/msg00000.html http://secunia.com/advisories/24830 http://secunia.com/advisories/24966 http://www.securityfocus.com/bid/23396 http://www.securityfocus.com/bid/23569 http://www.securitytracker.com/id?1017889 http://www.securitytracker.com/id?101794 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 5.0EPSS: 2%CPEs: 2EXPL: 0CVE-2005-3714
https://notcve.org/view.php?id=CVE-2005-3714
The network interface for Apple AirPort Express 6.x before Firmware Update 6.3, and AirPort Extreme 5.x before Firmware Update 5.7, allows remote attackers to cause a denial of service (unresponsive interface) via malformed packets. • http://lists.apple.com/archives/security-announce/2006/Jan/msg00000.html http://secunia.com/advisories/18319 http://securitytracker.com/id?1015443 http://www.osvdb.org/22244 http://www.securityfocus.com/bid/16146 http://www.vupen.com/english/advisories/2006/0064 • CWE-399: Resource Management Errors •