Description: Two weaknesses have been reported in Apple AirPort Extreme Base Station, which can be exploited by malicious people to bypass certain security restrictions or to disclose certain sensitive information.
1) An AirPort Extreme Base Station with 802.11n allows incoming IPv6 connections in the default configuration where the option "Block incoming IPv6 connections" is not selected.
2) An unspecified error in the AirPort Disk Feature of AirPort Extreme Base Stations with 802.11n can be exploited to disclose filenames on password-protected disks.
Successful exploitation of weakness #2 requires access to the local network.
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
