Test Kennung:	1.3.6.1.4.1.25623.1.0.11620
Kategorie:	Misc.
Titel:	Airport Administrative Port
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is an Apple Airport Wireless Access Point which can be administrated on top of TCP port 5009. There is a design flaw in the administrative protocol which makes the clients which connect to this port send the password in plain text (although slightly obsfuscated). An attacker who has the ability to sniff the data going to this device may use this flaw to gain its administrative password and gain its control. Since the airport base station does not keep any log, it will be difficult to determine that administrative access has been stolen. Solution : Block incoming traffic to this port, and only administer this base station when connected to it using a cross-over ethernet cable. Risk factor : Medium
Querverweis:	BugTraq ID: 7554 Common Vulnerability Exposure (CVE) ID: CVE-2003-0270 @stake Security Advisory: A051203-1 http://www.atstake.com/research/advisories/2003/a051203-1.txt http://www.securityfocus.com/bid/7554 http://securitytracker.com/id?1006742 http://secunia.com/advisories/8773 XForce ISS Database: airport-auth-credentials-disclosure(11980) https://exchange.xforce.ibmcloud.com/vulnerabilities/11980
Copyright	This script is Copyright (C) 2003 Tenable Network Security

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.