Juniper Releases Second Patch To Fix Flaws



/ 3 years ago

Juniper-Networks

Juniper has been in the news a lot recently, after discovering that their firewalls exposed virtual private networks ‘secure’ data. It was then revealed that this went one step further, with groups like the NSA and GCHQ working together to hack Junipers firewalls. If this wasn’t bad enough, Juniper fell silent on the matter before it was revealed that the software that was vulnerable was still located within their software.  This is set to change though with Juniper releasing a second patch, designed to remove the software responsible for their “insecure” software.

In a post titled “Advancing the Security of Juniper Products“, the use of Dual_EC and ANSI X9.31 will be replaced with a different number generator, one that is used in other products. Dual_EC is the software that is considered flawed and therefore, the greatest security risk, even though it was only added to the software a year after the issues were publically revealed.

This action comes as part of a “detailed investigation” of their software’s code, resulting in patches and the removal of “unauthorized code”. While these actions are well welcomed the questions remain as to why this all started. Where did the “unauthorized code” come from and if Stephen Checkoway, a computer science lecturer from the University  of Illinois in Chicago, is correct, the addition of Dual_EC actually reduced the security on Juniper’s software, making it easier to access it through a backdoor.

Topics: , , , , , ,

Support eTeknix.com

By supporting eTeknix, you help us grow. And continue to bring you the latest news, reviews, and competitions. Follow us on Facebook and Twitter to keep up with the latest technology. Share your favourite articles, chat with the team and more. Also check out eTeknix YouTube, where you'll find our latest video reviews, event coverage and features in 4K!
eTeknix FacebookeTeknix TwittereTeknix Instagram

Check out our Latest Video

Speak Your Mind

Tell us what you're thinking...
and oh, if you want a pic to show with your comment, go get a gravatar!

  • Be Social with eTeknix

  • Poll

    AMD or NVIDIA?

    View Results