VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 22, 2010· Updated Jun 16, 2026

CVE-2010-0039

CVE-2010-0039

Description

The Application-Level Gateway (ALG) on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 modifies PORT commands in incoming FTP traffic, which allows remote attackers to use the device's IP address for arbitrary intranet TCP traffic by leveraging write access to an intranet FTP server.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

15
  • Apple Inc./Airport Express
    cpe:2.3:h:apple:airport_express:*:*:*:*:*:*:*:*
  • Apple Inc./Airport Express Base Station Firmware8 versions
    cpe:2.3:h:apple:airport_express_base_station_firmware:*:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:h:apple:airport_express_base_station_firmware:*:*:*:*:*:*:*:*range: <=7.4.2
    • cpe:2.3:h:apple:airport_express_base_station_firmware:3.84:*:*:*:*:*:*:*
    • cpe:2.3:h:apple:airport_express_base_station_firmware:4.0.9:*:*:*:*:*:*:*
    • cpe:2.3:h:apple:airport_express_base_station_firmware:6.1:*:*:*:*:*:*:*
    • cpe:2.3:h:apple:airport_express_base_station_firmware:6.3:*:*:*:*:*:*:*
    • cpe:2.3:h:apple:airport_express_base_station_firmware:7.3.2:*:*:*:*:*:*:*
    • cpe:2.3:h:apple:airport_express_base_station_firmware:7.4.1:*:*:*:*:*:*:*
    • (no CPE)range: <7.5.2
  • Apple Inc./Airport Extreme
    cpe:2.3:h:apple:airport_extreme:*:*:*:*:*:*:*:*
  • Apple Inc./Airport Extreme Base Station Firmware3 versions
    cpe:2.3:h:apple:airport_extreme_base_station_firmware:5.5:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:h:apple:airport_extreme_base_station_firmware:5.5:*:*:*:*:*:*:*
    • cpe:2.3:h:apple:airport_extreme_base_station_firmware:5.7:*:*:*:*:*:*:*
    • (no CPE)range: <7.5.2
  • Apple Inc./Time Capsule2 versions
    cpe:2.3:h:apple:time_capsule:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:h:apple:time_capsule:*:*:*:*:*:*:*:*
    • (no CPE)range: <7.5.2

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.