Apple patches 802.11n Airports

Security fix covers two holes in base station's software

Written by Shaun Nichols in California

A new security update from Apple addresses two flaws in the company's Airport Extreme wireless hubs.

The patch only affects the latest 802.11n base stations. 802.11n-equipped notebooks, desktops, and earlier model Airport base stations are not affected.

The more serious of the two vulnerabilities could allow a hacker to access a network and carry out remote attacks. By default, some systems were not configured to block incoming IPv6 traffic, allowing for unsolicited connections to be made without the user's knowledge.

The second of the two vulnerabilities lies within the Airport disk component. This allows for a USB storage device to be connected to the base station and added to the wireless network. If exploited, the vulnerability could allow an attacker to view filenames on the USB disk. The attacker would not, however, be able to open any files or applications.

Macintosh wireless networking components has been the subject of several vulnerability reports in recent months. Last August, a pair of researchers demonstrated an attack on a MacBook Pro using a 3rd-party networking card. In November, security researcher HD Moore revealed an exploit that targeted older Macs. Apple patched Airport-specific vulnerabilities in September and November.

The latest Airport update can be downloaded from Apple's support site.

See also:

reader comments

related articles

 

Major DNS flaw revealed

Experts sound alarms over early disclosure 23 Jul 2008

One in four public DNS servers insecure

Survey highlights vulnerability of web servers to Kaminsky cache poisoning flaw 10 Nov 2008

Exploit emerges for DNS flaw

First attack tool created for vulnerability 25 Jul 2008

latest news

Ballmer highlights aims for New Year

Ballmer announces Windows 7 beta and future alliances designed to improve information sharing 08 Jan 2009

Active Storage completes UK Jigsaw

Jigsaw unveiled as Raid vendor's first non-US Platinum partner as it launches in Europe 08 Jan 2009

Dell quits Irish production

Vendor to slash 1,900 jobs in Limerick as it migrates assembly for EMEA customers to Poland 08 Jan 2009

poll

Challenging times ahead?

Challenging times ahead?

Do you think there will be a lot of channel job cuts in 2009?

Previous poll results

Paul Anderson, Trend Micro

Vendor Q&A: Paul Anderson, Trend Micro

During this Q&A session Paul Anderson, UK country manager of Trend Micro talks about the changing threat landscape and how Trend is working with resellers in 2009

Sara Yirrell and Rick Wallis

Vendor Q&A: Rick Wallis, NEC Computers

In this exclusive vendor Q&A, Rick Wallis, UK sales director at NEC Computers talks to CRN editor Sara Yirrell about his firm’s plans for the channel.

events

Channel Expo 2009 logo

Channel Expo 2009

The UK's top reseller exhibition will return to the NEC on 20 May 2009

CRN Fight Night 2009

The channel's only white-collar boxing event is back

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Advertisement

White papers

Search white papers

Top categories

Primary Navigation