Stan's List

This update requires AirPort Utility 5.1. If you have AirPort Utility 5.0 installed, you can update to AirPort Utility 5.1 by installing AirPort Base Station Update 2007-001:

AirPort Base Station Firmware 7.1 download page.

This update addresses the following security issues:

CVE-2007-1338
The default configuration of an AirPort Extreme Base Station with 802.11n allows incoming IPv6 connections. This may expose network services on hosts connected through an AirPort Extreme Base Station with 802.11n to remote attackers. This update addresses the issue by changing the default setting to limit inbound IPv6 traffic to the local network. This issue only affects AirPort Extreme Base Station with 802.11n, and not other versions of the Base Station.

CVE-2007-0734
AirPort Disk is a feature of AirPort Extreme Base Station with 802.11n* that allows the sharing of files from a USB hard drive connected to a compatible base station. Sharing options, including password protection, are available via the AirPort Disk Utility. An issue in the AirPort Disk feature allows users on the local network to view filenames (but not their contents) on a password-protected disk without providing a password. This update addresses the issue by performing additional validation on AirPort Disk access requests. This issue only affects AirPort Extreme Base Station with 802.11n, and not other versions of the Base Station. [...]