CVE-2010-0039
Severity Score
2.6
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The Application-Level Gateway (ALG) on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 modifies PORT commands in incoming FTP traffic, which allows remote attackers to use the device's IP address for arbitrary intranet TCP traffic by leveraging write access to an intranet FTP server.
Application-Level Gateway (ALG) en Apple Time Capsule, AirPort Extreme Base Station, y AirPort Express Base Station con firmware anterior v7.5.2 modifica los comandos PORT en el tráfico FTP, lo que permite a atacantes remotos usar la dirección IP del dispositivo para tráfico de intranet TCP de su elección aprovechando el acceso de escritura en el servidor FTP de intranet.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2009-12-15 CVE Reserved
- 2010-12-17 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-264: Permissions, Privileges, and Access Controls
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| http://www.securitytracker.com/id?1024907 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://lists.apple.com/archives/security-announce/2010//Dec/msg00001.html | 2011-01-19 | |
| http://support.apple.com/kb/HT4298 | 2011-01-19 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Apple Search vendor "Apple" | Airport Express Base Station Firmware Search vendor "Apple" for product "Airport Express Base Station Firmware" | <= 7.4.2 Search vendor "Apple" for product "Airport Express Base Station Firmware" and version " <= 7.4.2" | - |
Affected
| in | Apple Search vendor "Apple" | Airport Express Search vendor "Apple" for product "Airport Express" | * | - |
Affected
|
| Apple Search vendor "Apple" | Airport Express Base Station Firmware Search vendor "Apple" for product "Airport Express Base Station Firmware" | <= 7.4.2 Search vendor "Apple" for product "Airport Express Base Station Firmware" and version " <= 7.4.2" | - |
Affected
| in | Apple Search vendor "Apple" | Airport Extreme Search vendor "Apple" for product "Airport Extreme" | * | - |
Affected
|
| Apple Search vendor "Apple" | Airport Express Base Station Firmware Search vendor "Apple" for product "Airport Express Base Station Firmware" | <= 7.4.2 Search vendor "Apple" for product "Airport Express Base Station Firmware" and version " <= 7.4.2" | - |
Affected
| in | Apple Search vendor "Apple" | Time Capsule Search vendor "Apple" for product "Time Capsule" | * | - |
Affected
|
| Apple Search vendor "Apple" | Airport Express Base Station Firmware Search vendor "Apple" for product "Airport Express Base Station Firmware" | 3.84 Search vendor "Apple" for product "Airport Express Base Station Firmware" and version "3.84" | - |
Affected
| in | Apple Search vendor "Apple" | Airport Express Search vendor "Apple" for product "Airport Express" | * | - |
Affected
|
| Apple Search vendor "Apple" | Airport Express Base Station Firmware Search vendor "Apple" for product "Airport Express Base Station Firmware" | 3.84 Search vendor "Apple" for product "Airport Express Base Station Firmware" and version "3.84" | - |
Affected
| in | Apple Search vendor "Apple" | Airport Extreme Search vendor "Apple" for product "Airport Extreme" | * | - |
Affected
|
| Apple Search vendor "Apple" | Airport Express Base Station Firmware Search vendor "Apple" for product "Airport Express Base Station Firmware" | 3.84 Search vendor "Apple" for product "Airport Express Base Station Firmware" and version "3.84" | - |
Affected
| in | Apple Search vendor "Apple" | Time Capsule Search vendor "Apple" for product "Time Capsule" | * | - |
Affected
|
| Apple Search vendor "Apple" | Airport Express Base Station Firmware Search vendor "Apple" for product "Airport Express Base Station Firmware" | 4.0.9 Search vendor "Apple" for product "Airport Express Base Station Firmware" and version "4.0.9" | - |
Affected
| in | Apple Search vendor "Apple" | Airport Express Search vendor "Apple" for product "Airport Express" | * | - |
Affected
|
| Apple Search vendor "Apple" | Airport Express Base Station Firmware Search vendor "Apple" for product "Airport Express Base Station Firmware" | 4.0.9 Search vendor "Apple" for product "Airport Express Base Station Firmware" and version "4.0.9" | - |
Affected
| in | Apple Search vendor "Apple" | Airport Extreme Search vendor "Apple" for product "Airport Extreme" | * | - |
Affected
|
| Apple Search vendor "Apple" | Airport Express Base Station Firmware Search vendor "Apple" for product "Airport Express Base Station Firmware" | 4.0.9 Search vendor "Apple" for product "Airport Express Base Station Firmware" and version "4.0.9" | - |
Affected
| in | Apple Search vendor "Apple" | Time Capsule Search vendor "Apple" for product "Time Capsule" | * | - |
Affected
|
| Apple Search vendor "Apple" | Airport Express Base Station Firmware Search vendor "Apple" for product "Airport Express Base Station Firmware" | 6.1 Search vendor "Apple" for product "Airport Express Base Station Firmware" and version "6.1" | - |
Affected
| in | Apple Search vendor "Apple" | Airport Express Search vendor "Apple" for product "Airport Express" | * | - |
Affected
|
| Apple Search vendor "Apple" | Airport Express Base Station Firmware Search vendor "Apple" for product "Airport Express Base Station Firmware" | 6.1 Search vendor "Apple" for product "Airport Express Base Station Firmware" and version "6.1" | - |
Affected
| in | Apple Search vendor "Apple" | Airport Extreme Search vendor "Apple" for product "Airport Extreme" | * | - |
Affected
|
| Apple Search vendor "Apple" | Airport Express Base Station Firmware Search vendor "Apple" for product "Airport Express Base Station Firmware" | 6.1 Search vendor "Apple" for product "Airport Express Base Station Firmware" and version "6.1" | - |
Affected
| in | Apple Search vendor "Apple" | Time Capsule Search vendor "Apple" for product "Time Capsule" | * | - |
Affected
|
| Apple Search vendor "Apple" | Airport Express Base Station Firmware Search vendor "Apple" for product "Airport Express Base Station Firmware" | 6.3 Search vendor "Apple" for product "Airport Express Base Station Firmware" and version "6.3" | - |
Affected
| in | Apple Search vendor "Apple" | Airport Express Search vendor "Apple" for product "Airport Express" | * | - |
Affected
|
| Apple Search vendor "Apple" | Airport Express Base Station Firmware Search vendor "Apple" for product "Airport Express Base Station Firmware" | 6.3 Search vendor "Apple" for product "Airport Express Base Station Firmware" and version "6.3" | - |
Affected
| in | Apple Search vendor "Apple" | Airport Extreme Search vendor "Apple" for product "Airport Extreme" | * | - |
Affected
|
| Apple Search vendor "Apple" | Airport Express Base Station Firmware Search vendor "Apple" for product "Airport Express Base Station Firmware" | 6.3 Search vendor "Apple" for product "Airport Express Base Station Firmware" and version "6.3" | - |
Affected
| in | Apple Search vendor "Apple" | Time Capsule Search vendor "Apple" for product "Time Capsule" | * | - |
Affected
|
| Apple Search vendor "Apple" | Airport Express Base Station Firmware Search vendor "Apple" for product "Airport Express Base Station Firmware" | 7.3.2 Search vendor "Apple" for product "Airport Express Base Station Firmware" and version "7.3.2" | - |
Affected
| in | Apple Search vendor "Apple" | Airport Express Search vendor "Apple" for product "Airport Express" | * | - |
Affected
|
| Apple Search vendor "Apple" | Airport Express Base Station Firmware Search vendor "Apple" for product "Airport Express Base Station Firmware" | 7.3.2 Search vendor "Apple" for product "Airport Express Base Station Firmware" and version "7.3.2" | - |
Affected
| in | Apple Search vendor "Apple" | Airport Extreme Search vendor "Apple" for product "Airport Extreme" | * | - |
Affected
|
| Apple Search vendor "Apple" | Airport Express Base Station Firmware Search vendor "Apple" for product "Airport Express Base Station Firmware" | 7.3.2 Search vendor "Apple" for product "Airport Express Base Station Firmware" and version "7.3.2" | - |
Affected
| in | Apple Search vendor "Apple" | Time Capsule Search vendor "Apple" for product "Time Capsule" | * | - |
Affected
|
| Apple Search vendor "Apple" | Airport Express Base Station Firmware Search vendor "Apple" for product "Airport Express Base Station Firmware" | 7.4.1 Search vendor "Apple" for product "Airport Express Base Station Firmware" and version "7.4.1" | - |
Affected
| in | Apple Search vendor "Apple" | Airport Express Search vendor "Apple" for product "Airport Express" | * | - |
Affected
|
| Apple Search vendor "Apple" | Airport Express Base Station Firmware Search vendor "Apple" for product "Airport Express Base Station Firmware" | 7.4.1 Search vendor "Apple" for product "Airport Express Base Station Firmware" and version "7.4.1" | - |
Affected
| in | Apple Search vendor "Apple" | Airport Extreme Search vendor "Apple" for product "Airport Extreme" | * | - |
Affected
|
| Apple Search vendor "Apple" | Airport Express Base Station Firmware Search vendor "Apple" for product "Airport Express Base Station Firmware" | 7.4.1 Search vendor "Apple" for product "Airport Express Base Station Firmware" and version "7.4.1" | - |
Affected
| in | Apple Search vendor "Apple" | Time Capsule Search vendor "Apple" for product "Time Capsule" | * | - |
Affected
|
| Apple Search vendor "Apple" | Airport Extreme Base Station Firmware Search vendor "Apple" for product "Airport Extreme Base Station Firmware" | 5.5 Search vendor "Apple" for product "Airport Extreme Base Station Firmware" and version "5.5" | - |
Affected
| in | Apple Search vendor "Apple" | Airport Express Search vendor "Apple" for product "Airport Express" | * | - |
Affected
|
| Apple Search vendor "Apple" | Airport Extreme Base Station Firmware Search vendor "Apple" for product "Airport Extreme Base Station Firmware" | 5.5 Search vendor "Apple" for product "Airport Extreme Base Station Firmware" and version "5.5" | - |
Affected
| in | Apple Search vendor "Apple" | Airport Extreme Search vendor "Apple" for product "Airport Extreme" | * | - |
Affected
|
| Apple Search vendor "Apple" | Airport Extreme Base Station Firmware Search vendor "Apple" for product "Airport Extreme Base Station Firmware" | 5.5 Search vendor "Apple" for product "Airport Extreme Base Station Firmware" and version "5.5" | - |
Affected
| in | Apple Search vendor "Apple" | Time Capsule Search vendor "Apple" for product "Time Capsule" | * | - |
Affected
|
| Apple Search vendor "Apple" | Airport Extreme Base Station Firmware Search vendor "Apple" for product "Airport Extreme Base Station Firmware" | 5.7 Search vendor "Apple" for product "Airport Extreme Base Station Firmware" and version "5.7" | - |
Affected
| in | Apple Search vendor "Apple" | Airport Express Search vendor "Apple" for product "Airport Express" | * | - |
Affected
|
| Apple Search vendor "Apple" | Airport Extreme Base Station Firmware Search vendor "Apple" for product "Airport Extreme Base Station Firmware" | 5.7 Search vendor "Apple" for product "Airport Extreme Base Station Firmware" and version "5.7" | - |
Affected
| in | Apple Search vendor "Apple" | Airport Extreme Search vendor "Apple" for product "Airport Extreme" | * | - |
Affected
|
| Apple Search vendor "Apple" | Airport Extreme Base Station Firmware Search vendor "Apple" for product "Airport Extreme Base Station Firmware" | 5.7 Search vendor "Apple" for product "Airport Extreme Base Station Firmware" and version "5.7" | - |
Affected
| in | Apple Search vendor "Apple" | Time Capsule Search vendor "Apple" for product "Time Capsule" | * | - |
Affected
|