CVE-2010-0039

The Application-Level Gateway (ALG) on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 modifies PORT commands in incoming FTP traffic, which allows remote attackers to use the device's IP address for arbitrary intranet TCP traffic by leveraging write access to an intranet FTP server.

• CWE-264

• http://lists.apple.com/archives/security-announce/2010//Dec/msg00001.htmlPatch, Vendor Advisory
• http://support.apple.com/kb/HT4298Patch, Vendor Advisory
• http://www.securitytracker.com/id?1024907
• http://lists.apple.com/archives/security-announce/2010//Dec/msg00001.htmlPatch, Vendor Advisory
• http://support.apple.com/kb/HT4298Patch, Vendor Advisory
• http://www.securitytracker.com/id?1024907

Published

Dec 22, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-0033Stack-based buffer overflow in Microsoft Office PowerPoint 2…
• CVE-2010-0034Stack-based buffer overflow in Microsoft Office PowerPoint 2…
• CVE-2010-0035The Key Distribution Center (KDC) in Kerberos in Microsoft W…
• CVE-2010-0036Buffer overflow in CoreAudio in Apple Mac OS X 10.5.8 and 10…7.8
• CVE-2010-0037Buffer overflow in Image RAW in Apple Mac OS X 10.5.8 and 10…8.8
• CVE-2010-0038Recovery Mode in Apple iPhone OS 1.0 through 3.1.2, and iPho…
• CVE-2010-0040Integer overflow in ColorSync in Apple Safari before 4.0.5 o…
• CVE-2010-0041ImageIO in Apple Safari before 4.0.5 and iTunes before 9.1 o…
• CVE-2010-0042ImageIO in Apple Safari before 4.0.5 and iTunes before 9.1 o…
• CVE-2010-0043ImageIO in Apple Safari before 4.0.5 and iTunes before 9.1 o…
• CVE-2010-0044PubSub in Apple Safari before 4.0.5 does not properly implem…
• CVE-2010-0045Apple Safari before 4.0.5 on Windows does not properly valid…