Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2010-0039 | First vendor Publication | 2010-12-21 |
| Vendor | Cve | Last vendor Modification | 2024-11-21 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:H/Au:N/C:P/I:N/A:N) | |||
|---|---|---|---|
| Cvss Base Score | 2.6 | Attack Range | Network |
| Cvss Impact Score | 2.9 | Attack Complexity | High |
| Cvss Expoit Score | 4.9 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| The Application-Level Gateway (ALG) on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 modifies PORT commands in incoming FTP traffic, which allows remote attackers to use the device's IP address for arbitrary intranet TCP traffic by leveraging write access to an intranet FTP server. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0039 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-264 | Permissions, Privileges, and Access Controls |
CPE : Common Platform Enumeration
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 70150 | Apple Airport Multiple Products Application-Level Gateway FTP PORT Command In... Apple Time Capsule, Airport Extreme Base Station and AirPort Express Base Station contain a flaw related to the Application-Level Gateway's modification of PORT commands in incoming FTP traffic. This may allow a remote attacker to leverage write access to an intranet FTP server to use the device's IP address for arbitrary TCP traffic. |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2010-12-17 | Name : The remote network device is affected by multiple remote vulnerabilities. File : airport_firmware_7_5_2.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
| Source | Url |
|---|
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:06:39 |
|
| 2024-11-28 12:20:50 |
|
| 2020-05-23 01:41:28 |
|
| 2020-05-23 00:25:02 |
|
| 2014-02-17 10:53:05 |
|
| 2013-05-10 23:14:00 |
|
