{"vuid":"VU#583552","idnumber":"583552","name":"Apple Airport Extreme fails to properly process 802.11 frames","keywords":["Apple","Airport Extreme","DoS","denial of service","beacon frames","802.11 beacon"],"overview":"A vulnerability exists in the Apple AirPort Extreme wireless driver that may allow an attacker to crash a vulnerable system.","clean_desc":"The Apple AirPort Extreme adapter is an 802.11g compatible wireless adapter used in Apple OS X laptops and desktops. A flaw exists in the way AirPort Extreme wireless drivers handle certain malformed 802.11 frames which may result in an out-of-bounds memory access. This flaw results in a vulnerability that could allow an attacker to cause a kernel panic on a vulnerable system. To exploit this vulnerability an attacker would need to send a specially crafted 802.11 frame to a vulnerable system. Since 802.11b and 802.11g management frames are not encrypted, using wireless encryption (WEP/WPA) may not mitigate this vulnerability. Per Apple Security Advisory 2007-01-25, the Core Duo version of Mac mini, MacBook, and MacBook Pro computers are affected by this vulnerability.","impact":"A remote unauthenticated attacker within 802.11 radio range may be able to create a denial-of-service condition by crashing a vulnerable system.","resolution":"Upgrade\nApple has issued an upgrade to address this issue. See or Apple Security Advisory 2007-01-25 or AirPort Extreme Update 2007-001 for more details.","workarounds":"Disable the Affected Wireless Adapter\nUntil updates can be applied, turning off the wireless adapter can mitigate this vulnerability. To turn off the wireless card, follow the instructions found in Apple's knowledgebase: Turning AirPort off\nTurn your AirPort Card off when you're in situations where radio communication may be prohibited, such as in an airplane or at a hospital. 1. Open the Internet Connect application and click AirPort in the toolbar. 2. Click Turn AirPort Off. If you have disabled the AirPort port in Network preferences, then your AirPort Card is already turned off. To disable the AirPort port, choose Network Port Configurations from the Show pop-up menu and deselect the AirPort checkbox.","sysaffected":"","thanks":"This issue was made public by LMH on the \nMonth of Kernel Bugs\n website.","author":"This document was written by Ryan Giobbi.","public":["http://lists.apple.com/archives/security-announce/2007/Jan/msg00001.html","http://www.apple.com/support/downloads/airportextremeupdate2007001.html","http://en.wikipedia.org/wiki/AirPort#Airport_Extreme_Card","http://projects.info-pull.com/mokb/MOKB-30-11-2006.html","http://docs.info.apple.com/article.html?artnum=305031","http://docs.info.apple.com/article.html?artnum=106227","http://standards.ieee.org/getieee802/download/802.11g-2003.pdf","http://secunia.com/advisories/23159/"],"cveids":["CVE-2006-6292"],"certadvisory":"","uscerttechnicalalert":null,"datecreated":"2006-12-01T19:19:06Z","publicdate":"2006-11-30T00:00:00Z","datefirstpublished":"2007-02-02T20:45:16Z","dateupdated":"2007-02-02T20:45:25Z","revision":15,"vrda_d1_directreport":"0","vrda_d1_population":"3","vrda_d1_impact":"3","cam_widelyknown":"10","cam_exploitation":"0","cam_internetinfrastructure":"3","cam_population":"3","cam_impact":"12","cam_easeofexploitation":"3","cam_attackeraccessrequired":"14","cam_scorecurrent":"0.36855","cam_scorecurrentwidelyknown":"0.65205","cam_scorecurrentwidelyknownexploited":"1.21905","ipprotocol":"","cvss_accessvector":"","cvss_accesscomplexity":"","cvss_authentication":null,"cvss_confidentialityimpact":"","cvss_integrityimpact":"","cvss_availabilityimpact":"","cvss_exploitablity":null,"cvss_remediationlevel":"","cvss_reportconfidence":"","cvss_collateraldamagepotential":"","cvss_targetdistribution":"","cvss_securityrequirementscr":"","cvss_securityrequirementsir":"","cvss_securityrequirementsar":"","cvss_basescore":"","cvss_basevector":"","cvss_temporalscore":"","cvss_environmentalscore":"","cvss_environmentalvector":"","metric":0.36855,"vulnote":null}