Two weaknesses have been reported in Apple AirPort Extreme Base Station, which can be exploited by malicious people to bypass certain security restrictions or to disclose certain sensitive information.

1) An AirPort Extreme Base Station with 802.11n allows incoming IPv6 connections in the default configuration where the option "Block incoming IPv6 connections" is not selected.

2) An unspecified error in the AirPort Disk Feature of AirPort Extreme Base Stations with 802.11n can be exploited to disclose filenames on password-protected disks.

Successful exploitation of weakness #2 requires access to the local network.

Solution
Update to firmware version 7.1.
Further details available to Secunia VIM customers

Provided and/or discovered by
1) Iljitsch van Beijnum
2) Reported by the vendor

Original Advisory
Apple:
http://docs.info.apple.com/article.html?artnum=305366

1) http://arstechnica.com/journals/apple.ars/2007/2/14/7063

Deep Links
Links available to Secunia VIM customers