CyberSec.Space Logo
Back to CVE Browser

CVE-2010-0039

LOW
2.6
CVSS Severity Score
EPSS Score0.1190%
EPSS Percentile17.87th
PublishedDec 22, 2010
Last ModifiedApr 29, 2026

Vulnerability Description

The Application-Level Gateway (ALG) on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 modifies PORT commands in incoming FTP traffic, which allows remote attackers to use the device's IP address for arbitrary intranet TCP traffic by leveraging write access to an intranet FTP server.

Affected Platforms (CPE)

🔌
Apple

Airport Express Base Station Firmware

<= 7.4.2
🔌
Apple

Airport Express Base Station Firmware

= 3.84
🔌
Apple

Airport Express Base Station Firmware

= 4.0.9
🔌
Apple

Airport Express Base Station Firmware

= 6.1
🔌
Apple

Airport Express Base Station Firmware

= 6.3
🔌
Apple

Airport Express Base Station Firmware

= 7.3.2
🔌
Apple

Airport Express Base Station Firmware

= 7.4.1
🔌
Apple

Airport Extreme Base Station Firmware

= 5.5
🔌
Apple

Airport Extreme Base Station Firmware

= 5.7
🔌
Apple

Airport Express

All versions
🔌
Apple

Airport Extreme

All versions
🔌
Apple

Time Capsule

All versions

References & Advisories

🔗 http://lists.apple.com/archives/security-announce/2010//Dec/msg00001.html
🔗 http://support.apple.com/kb/HT4298
🔗 http://www.securitytracker.com/id?1024907
🔗 http://lists.apple.com/archives/security-announce/2010//Dec/msg00001.html
🔗 http://support.apple.com/kb/HT4298
🔗 http://www.securitytracker.com/id?1024907

Related Vulnerabilities

CVE-2010-18047.1

Unspecified vulnerability in the network bridge functionality on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort...

CVE-2009-21896.1

The ICMPv6 implementation on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware ...

CVE-2010-044410.0

HP Operations Agent 8.51, 8.52, 8.53, and 8.60 on Solaris 10 uses a blank password for the opc_op account, which allows remote att...

CVE-2010-027410.0

Unspecified vulnerability in the Edit Contact scene in Ultra-light Mode in IBM Lotus iNotes (aka Domino Web Access or DWA) before ...