Test ID:	1.3.6.1.4.1.25623.1.0.11620
Category:	Misc.
Title:	Airport Administrative Port
Summary:	NOSUMMARY
Description:	Description: The remote host is an Apple Airport Wireless Access Point which can be administrated on top of TCP port 5009. There is a design flaw in the administrative protocol which makes the clients which connect to this port send the password in plain text (although slightly obsfuscated). An attacker who has the ability to sniff the data going to this device may use this flaw to gain its administrative password and gain its control. Since the airport base station does not keep any log, it will be difficult to determine that administrative access has been stolen. Solution : Block incoming traffic to this port, and only administer this base station when connected to it using a cross-over ethernet cable. Risk factor : Medium
Cross-Ref:	BugTraq ID: 7554 Common Vulnerability Exposure (CVE) ID: CVE-2003-0270 @stake Security Advisory: A051203-1 http://www.atstake.com/research/advisories/2003/a051203-1.txt http://www.securityfocus.com/bid/7554 http://securitytracker.com/id?1006742 http://secunia.com/advisories/8773 XForce ISS Database: airport-auth-credentials-disclosure(11980) https://exchange.xforce.ibmcloud.com/vulnerabilities/11980
Copyright	This script is Copyright (C) 2003 Tenable Network Security

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.