Re:SSH Backdoor found in Fortinet firewalls
by dogma1138 on Tuesday January 12, 2016 @12:36PM
(#10888843)
You don't get external SSH access to Juniper FW's either its either from the local LAN or more commonly through a separate management network/vlan.
[ Parent
| on HN ]
Re:SSH Backdoor found in Fortinet firewalls
by rgbrenner on Tuesday January 12, 2016 @01:49PM
(#10889455)
they're equal on that part.. but the ssh backdoor was only one part of that announcement. The second part was a backdoor in the VPN (via Dual_EC_DRBG), that permits a passive eavesdropper to decrypt the connection: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7756
https://www.schneier.com/blog/archives/2015/12/back_door_in_...
Re:SSH Backdoor found in Fortinet firewalls
by matt_wulfeck on Tuesday January 12, 2016 @02:11PM
(#10889603)
More specifically, the backdoor had been backdoored, as someone replaced the Juniper constants (which itself replaced the NIST constants) in dual_ec with their own, which allowed passive traffic snooping. The backdoor to the backdoor was backdoored.
Re:SSH Backdoor found in Fortinet firewalls
by dogma1138 on Tuesday January 12, 2016 @05:33PM
(#10890926)
I know but the DualEC one is kinda well meh.
Only a single agent can most likely exploit it, it still requires quite a bit of computing power to decrypt even with selected values and you need to be able to capture VPN traffic.
The SSH backdoor means that any idiot with basic computer operation skills can log onto a firewall and start playing around with what ever they want.