Home / mailings APPLE-SA-2009-03-05 Time Capsule and AirPort Base Station
Posted on 05 March 2009
Apple Security-announce-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
APPLE-SA-2009-03-05 Time Capsule and AirPort Base Station (802.11n*)
Firmware 7.4.1
Time Capsule and AirPort Base Station (802.11n*) Firmware 7.4.1 is
now available and addresses the following:
CVE-ID: CVE-2008-2476
Available for: AirPort Extreme Base Station with 802.11n*,
AirPort Express Base Station with 802.11n*, Time Capsule
Impact: A remote user may be able to cause a denial of service
attack, observe private network traffic, or inject forged packets
Description: The IPv6 Neighbor Discovery Protocol implementation
does not validate the origin of Neighbor Discovery messages. By
sending a maliciously crafted message, a remote user may cause a
denial of service, observe private network traffic, or inject forged
packets. This update addresses the issue by performing additional
validation of Neighbor Discovery messages.
CVE-ID: CVE-2008-0473
Available for: AirPort Extreme Base Station with 802.11n*,
AirPort Express Base Station with 802.11n*, Time Capsule
Impact: A user on the local network may be able to cause an
unexpected device shutdown
Description: An out-of-bounds memory access issue exists in the
handling of PPPoE discovery packets. By sending a maliciously crafted
PPPoE discovery packet, a remote user may be able to cause an
unexpected device shutdown. This update addresses the issue
through improved bounds checking.
CVE-ID: CVE-2008-3530
Available for: AirPort Extreme Base Station with 802.11n*,
AirPort Express Base Station with 802.11n*, Time Capsule
Impact: A remote user may be able to cause an unexpected device
shutdown
Description: When IPv6 support is enabled, IPv6 nodes use ICMPv6 to
report errors encountered while processing packets. An implementation
issue in the handling of incoming ICMPv6 "Packet Too Big" messages
may cause an unexpected device shutdown. This update addresses
the issue through improved handling of ICMPv6 messages.
Installation note for Firmware version 7.4.1
Firmware version 7.4.1 is installed into Time Capsule or AirPort
Base Station with 802.11n* via AirPort Utility, provided with
the device.
It is recommended that AirPort Utility 5.4.1 be installed before
upgrading to Firmware version 7.4.1.
AirPort Utility 5.4.1 may be obtained through Apple's Software
Download site: http://www.apple.com/support/downloads/
(*) Based on an IEEE 802.11n draft specification
Information will also be posted to the Apple Security Updates
web site: http://support.apple.com/kb/HT1222
This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/
