Apple AirPort Extreme and Express WDS denial of service
| apple-airport-dos (18865) |  Medium Risk |
Description:
Apple AirPort devices are vulnerable to a denial of service attack, caused by a vulnerability when configured in a Wireless Data Service (WDS). If AirPort Extreme and Express are configured in a WDS, a remote attacker could connect to UDP port 161 to cause a link-state change to occur, resulting in the access points to stop responding.
Consequences:
Denial of Service
Remedy:
For AirPort Express running Mac OS X:
Apply the latest version of firmware (6.1.1 or later), available from the AirPort Express Firmware Update for Mac OS X Web page. See References.
For AirPort Express running Microsoft Windows:
Apply the latest version of firmware (6.1.1 or later), available from the AirPort Express Firmware Update for Windows Web page. See References.
For AirPort Extreme running Mac OS X:
Apply the latest version of firmware (5.5.1 or later), available from the AirPort Extreme Firmware Update for Mac OS X Web page. See References.
For AirPort Extreme running Microsoft Windows:
Apply the latest version of firmware (5.5.1 or later), available from the AirPort Extreme Firmware Update for Microsoft Windows Web page. See References.
References:
- AirPort Express Firmware Update for Mac OS X Web page: AirPort Express Firmware 6.1.1 for Mac OS X.
- AirPort Express Firmware Update for Microsoft Windows Web page: AirPort Express Firmware 6.1.1 for Windows.
- AirPort Extreme Firmware Update for Mac OS X Web page: AirPort Extreme Firmware 5.5.1 for Mac OS X.
- AirPort Extreme Firmware Update for Microsoft Windows Web page: AirPort Extreme Firmware 5.5.1 for Windows.
- Full-Disclosure Mailing List, Tue Jan 11 2005 - 18:56:29 CST : Apple Airport WDS DoS.
- BID-12152: Apple AirPort Wireless Distribution System Remote Denial of Service Vulnerability
- CVE-2005-0289: Apple AirPort Express prior to 6.1.1 and Extreme prior to 5.5.1, configured as a Wireless Data Service (WDS), allows remote attackers to cause a denial of service (device freeze) by connecting to UDP port 161 and before link-state change occurs.
- SA13753: Apple AirPort Express/Extreme WDS Denial of Service
Platforms Affected:
- Apple AirPort Express 6.1.1
- Apple AirPort Extreme 5.5.1
Reported:
Jan 11, 2005
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net