SSH Backdoor found in Fortinet firewalls

Re:SSH Backdoor found in Fortinet firewalls by tptacek on Tuesday January 12, 2016 @12:11PM (#10888644)

This probably isn't as bad as Juniper's, because you don't generally get external SSH access to a Fortinet box.

[ Parent | on HN ]

Re:SSH Backdoor found in Fortinet firewalls by sarciszewski on Tuesday January 12, 2016 @12:12PM (#10888652)

It's still good to hear that these backdoors are being discovered (and hopefully expunged).

[ Parent | on HN ]

Re:SSH Backdoor found in Fortinet firewalls by venomsnake on Tuesday January 12, 2016 @12:31PM (#10888813)

I think the main problem is the companies attitude towards the security of their problems. What else is in there?

Credibility is in a way binary - you either have it or don't.

[ Parent | on HN ]

Re:SSH Backdoor found in Fortinet firewalls by ecnepsnai on Tuesday January 12, 2016 @03:10PM (#10889985)

I fail to see how Fortinet had a bad attitude towards this issue. It was found, and fixed, 18 months ago before any of this information was released publicly.

[ Parent | on HN ]

Re:SSH Backdoor found in Fortinet firewalls by venomsnake on Tuesday January 12, 2016 @04:00PM (#10890348)

The existence of the issue in the first place.

[ Parent | on HN ]

Re:SSH Backdoor found in Fortinet firewalls by dogma1138 on Tuesday January 12, 2016 @12:36PM (#10888843)

You don't get external SSH access to Juniper FW's either its either from the local LAN or more commonly through a separate management network/vlan.

[ Parent | on HN ]

Re:SSH Backdoor found in Fortinet firewalls by rgbrenner on Tuesday January 12, 2016 @01:49PM (#10889455)

they're equal on that part.. but the ssh backdoor was only one part of that announcement. The second part was a backdoor in the VPN (via Dual_EC_DRBG), that permits a passive eavesdropper to decrypt the connection: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7756

https://www.schneier.com/blog/archives/2015/12/back_door_in_...

[ Parent | on HN ]

Re:SSH Backdoor found in Fortinet firewalls by matt_wulfeck on Tuesday January 12, 2016 @02:11PM (#10889603)

More specifically, the backdoor had been backdoored, as someone replaced the Juniper constants (which itself replaced the NIST constants) in dual_ec with their own, which allowed passive traffic snooping. The backdoor to the backdoor was backdoored.

[ Parent | on HN ]

Re:SSH Backdoor found in Fortinet firewalls by dogma1138 on Tuesday January 12, 2016 @05:33PM (#10890926)

I know but the DualEC one is kinda well meh. Only a single agent can most likely exploit it, it still requires quite a bit of computing power to decrypt even with selected values and you need to be able to capture VPN traffic.

The SSH backdoor means that any idiot with basic computer operation skills can log onto a firewall and start playing around with what ever they want.

[ Parent | on HN ]

Re:SSH Backdoor found in Fortinet firewalls by achillean on Wednesday January 13, 2016 @07:18PM (#10898738)

There are a lot of Fortinet boxes directly connected to the Internet:

https://www.shodan.io/search?query=product%3Afortinet

Of course not all of the results also expose SSH but some do.

[ Parent | on HN ]

Re:SSH Backdoor found in Fortinet firewalls by awqrre on Tuesday January 12, 2016 @01:34PM (#10889317)

Maybe there's another backdoor that hasn't been discovered yet, something like port-knocking.

[ Parent | on HN ]

Re:SSH Backdoor found in Fortinet firewalls by ouaibe on Tuesday January 12, 2016 @02:39PM (#10889777)

I'm pretty sure some (of these https://www.shodan.io/search?query=fortigate) do, especially considering SSH is usually trusted for its security. But I might be wrong.

[ Parent | on HN ]

Re:SSH Backdoor found in Fortinet firewalls by dano on Saturday January 16, 2016 @01:42AM (#10914536)

External SSH access to Juniper firewalls isn't normal either.

[ Parent | on HN ]