PDA

View Full Version : Airport Base Station security problem


yzedf
May 12, 2003, 09:35 PM
In summation:
Recommendation:

The only way to securely administer the AirPort Base Station is by
connecting to it via a cross-over cable. In environments where this
is not practical, it is advised that the AirPort Base Station be
managed through the Ethernet network, and not the wireless network.
http://www.atstake.com/research/advisories/2003/a051203-1.txt

Only a problem when you administer your Base Station.

Rower_CPU
May 13, 2003, 01:26 AM
Interesting. Doesn't this same vulnerability exist in all WAPs due to the fact that it's possible to eavesdrop on any wireless traffic, or is it a particularity of Apple's authentication scheme?

Chimaera
May 13, 2003, 03:03 AM
Basically what that says is trying to administer the system over the network or via non-encrypted wireless is basically making it very easy for someone to gain access to the control system, and the only way to be secure is either via direct connection from the controlling computer to the airport base (ie single cable, no hubs or switches or anything) or using encrypted wireless, which everyone should be using anyway, otherwise any idiot with a wireless machine can piggyback your network :)

So in otherword, unless you're a complete muppet theres nothing to worry about :)