March 20th, 2008
Apple plugs Airport Extreme Base Station firmware flaw
Apple has patched a denial of service vulnerability in its Airport Extreme Base Station firmware.
In an advisory Wednesday Apple said firmware version 7.3.1 patches a vulnerability where a “maliciously crafted AFP request may lead to a denial of service.”
Here’s the description for CVE-2008-1012:
An input validation issue exists in the AirPort Extreme
Base Station’s handling of AFP requests, which may cause file sharing to become unresponsive. This update addresses the issue by performing additional validation of AFP requests. This issue does not affect Time Capsule or AirPort Express. The fix for this issue is available in the following separate updates:
- - AirPort Extreme with 802.11n (Fast Ethernet) 7.3.1
- - AirPort Extreme with 802.11n (Gigabit Ethernet) 7.3.1
Credit to Alex deVries for reporting this issue.
The firmware update is the latest in a busy patch week for Apple, which updated Safari and OS X to plug security vulnerabilities. David Morgenstern has more on the functionality of the Airport update and has followed up on issues resulting from the other patches from Apple this week.
Larry Dignan is Editor in Chief of ZDNet and Editorial Director of ZDNet sister site TechRepublic. See his full profile and disclosure of his industry affiliations.
