[186459] in North American Network Operators' Group
Re: [CVE-2015-7755] Backdoor in Juniper/ScreenOS
daemon@ATHENA.MIT.EDU (Karsten Thomann)
Fri Dec 18 22:38:07 2015
X-Original-To: nanog@nanog.org
From: Karsten Thomann <karsten_thomann@linfre.de>
To: nanog@nanog.org
Date: Fri, 18 Dec 2015 13:19:36 +0000
In-Reply-To: <20151218082811.GA13639@nic.fr>
Errors-To: nanog-bounces@nanog.org
Am Freitag, 18. Dezember 2015, 09:28:11 schrieb Stephane Bortzmeyer:
> http://forums.juniper.net/t5/Security-Incident-Response/Important-Announceme
> nt-about-ScreenOS/ba-p/285554
>
https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10713&cat=
SIRT_1
> &actp=LIST
>
> Should we blame Juniper for letting a git repository open to
> "unauthorized code" or should we congratulate them for their frankness
> (few corporations would have admitted the problem)?
I think we should do both, even if it would be interessting to know how long
the problem already exists.
