VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Dec 22, 2010· Updated Apr 29, 2026

CVE-2010-0039

CVE-2010-0039

Description

The Application-Level Gateway (ALG) on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 modifies PORT commands in incoming FTP traffic, which allows remote attackers to use the device's IP address for arbitrary intranet TCP traffic by leveraging write access to an intranet FTP server.

Affected products

12
  • Apple Inc./Airport Express
    cpe:2.3:h:apple:airport_express:*:*:*:*:*:*:*:*
  • Apple Inc./Airport Express Base Station Firmware7 versions
    cpe:2.3:h:apple:airport_express_base_station_firmware:*:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:h:apple:airport_express_base_station_firmware:*:*:*:*:*:*:*:*range: <=7.4.2
    • cpe:2.3:h:apple:airport_express_base_station_firmware:3.84:*:*:*:*:*:*:*
    • cpe:2.3:h:apple:airport_express_base_station_firmware:4.0.9:*:*:*:*:*:*:*
    • cpe:2.3:h:apple:airport_express_base_station_firmware:6.1:*:*:*:*:*:*:*
    • cpe:2.3:h:apple:airport_express_base_station_firmware:6.3:*:*:*:*:*:*:*
    • cpe:2.3:h:apple:airport_express_base_station_firmware:7.3.2:*:*:*:*:*:*:*
    • cpe:2.3:h:apple:airport_express_base_station_firmware:7.4.1:*:*:*:*:*:*:*
  • Apple Inc./Airport Extreme
    cpe:2.3:h:apple:airport_extreme:*:*:*:*:*:*:*:*
  • Apple Inc./Airport Extreme Base Station Firmware2 versions
    cpe:2.3:h:apple:airport_extreme_base_station_firmware:5.5:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:h:apple:airport_extreme_base_station_firmware:5.5:*:*:*:*:*:*:*
    • cpe:2.3:h:apple:airport_extreme_base_station_firmware:5.7:*:*:*:*:*:*:*
  • Apple Inc./Time Capsule
    cpe:2.3:h:apple:time_capsule:*:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.