NVD

Id
53524  
Name
CVE-2007-1338  
Description
The default configuration of the AirPort utility in Apple AirPort Extreme creates an IPv6 tunnel but does not enable the "Block incoming IPv6 connections" setting, which might allow remote attackers to bypass intended access restrictions by establishing IPv6 sessions that would have been rejected over IPv4.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-03-08  
Modified Date
2011-03-07  
Seq
2007-1338  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
271070 53524 CVE-2007-1338 http://arstechnica.com/journals/apple.ars/2007/2/14/7063  View
271071 53524 CVE-2007-1338 http://docs.info.apple.com/article.html?artnum=305366  View
271072 53524 CVE-2007-1338 APPLE-SA-2007-04-09  View
271073 53524 CVE-2007-1338 1017889  View
271074 53524 CVE-2007-1338 ADV-2007-1308  View
271075 53524 CVE-2007-1338 airportextreme-ipv6-security-bypass(33526)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52976 JVNDB-2007-001668 Apple AirPort Extreme の AirPort ユーティリティのデフォルト設定におけるアクセス制限を回避される脆弱性 Apple AirPort Extreme の AirPort ユーティリティのデフォルト設定は、IPv6 トンネルを作成しても "内向き IPv6 接続をブロックする" 設定が有効にならないため、アクセス制限を回避される脆弱性が存在します。 CVE-2007-1338 24693 CVE-2007-1338 53524 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001668.html 2007-03-08 2012-06-26 View