ID de Prueba:	1.3.6.1.4.1.25623.1.0.11620
Categoría:	Misc.
Título:	Airport Administrative Port
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is an Apple Airport Wireless Access Point which can be administrated on top of TCP port 5009. There is a design flaw in the administrative protocol which makes the clients which connect to this port send the password in plain text (although slightly obsfuscated). An attacker who has the ability to sniff the data going to this device may use this flaw to gain its administrative password and gain its control. Since the airport base station does not keep any log, it will be difficult to determine that administrative access has been stolen. Solution : Block incoming traffic to this port, and only administer this base station when connected to it using a cross-over ethernet cable. Risk factor : Medium
Referencia Cruzada:	BugTraq ID: 7554 Common Vulnerability Exposure (CVE) ID: CVE-2003-0270 @stake Security Advisory: A051203-1 http://www.atstake.com/research/advisories/2003/a051203-1.txt http://www.securityfocus.com/bid/7554 http://securitytracker.com/id?1006742 http://secunia.com/advisories/8773 XForce ISS Database: airport-auth-credentials-disclosure(11980) https://exchange.xforce.ibmcloud.com/vulnerabilities/11980
Copyright	This script is Copyright (C) 2003 Tenable Network Security

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.