Apple has released a Firmware Update for its latest AirPort Extreme Base Station, the 4.6MB update addresses fixes, security and compatibility issues with the Base Stations.

This update includes general fixes, compatibility updates, and security improvements for the AirPort Extreme Base Station with 802.11n.

This update requires AirPort Utility 5.1. If you have AirPort Utility 5.0 installed, you can update to AirPort Utility 5.1 by installing AirPort Base Station Update 2007-001.

More advanced details of the update are available over the jump.



Firmware Update 7.1 for AirPort Extreme Base Station with 802.11n

  • AirPort Extreme Base Station with 802.11n Firmware

    CVE-ID: CVE-2007-1338

    Available for: AirPort Extreme Base Station with 802.11n

    Impact: AirPort Extreme Base Station with 802.11n allows incoming IPv6 connections

    Description: The default configuration of an AirPort Extreme Base Station with 802.11n allows incoming IPv6 connections. This may expose network services on hosts connected through an AirPort Extreme Base Station with 802.11n to remote attackers. This update addresses the issue by changing the default setting to limit inbound IPv6 traffic to the local network. This issue only affects AirPort Extreme Base Station with 802.11n, and not other versions of the Base Station.

    The AirPort Utility is used to configure the settings of the AirPort Extreme Base Station. After installing this update and restarting your system, you should use the AirPort Utility to review the configuration of your wireless network as follows:

    Open AirPort Utility

    Select the AirPort Extreme Base Station with 802.11n being configured

    Click the “Advanced” icon

    Click the “IPv6″ tab

    If “Block incoming IPv6 connections” is checked (selected), then inbound IPv6 traffic is limited and no further action is needed.
    If “Block incoming IPv6 connections” is not checked (deselected), and unsolicited incoming IPv6 connections are not desired, then it should be enabled as follows:
    Check “Block incoming IPv6 connections”
    Click the “Update” button at the bottom of the window to save the changes

  • AirPort Extreme Base Station with 802.11n Firmware

    CVE-ID: CVE-2007-0734

    Available for: AirPort Extreme Base Station with 802.11n

    Impact: Filenames on a password-protected AirPort Disk may be viewable to users on the local network

    Description: AirPort Disk is a feature of AirPort Extreme Base Station with 802.11n that allows the sharing of files from a USB hard drive connected to a compatible base station. Sharing options, including password protection, are available via the AirPort Disk Utility. An issue in the AirPort Disk feature allows users on the local network to view filenames (but not their contents) on a password-protected disk without providing a password. This update addresses the issue by performing additional validation on AirPort Disk access requests. This issue only affects AirPort Extreme Base Station with 802.11n, and not other versions of the Base Station.