ScreenOS

ScreenOS is a real-time embedded operating system for the NetScreen range of hardware firewall devices from Juniper Networks.

ScreenOS
DeveloperJuniper Networks
Working stateCurrent
Source modelClosed source
Latest release6.3.0r24 / July 2017 (2017-07)[1]
LicenseProprietary

Features

Beside transport level security ScreenOS also integrates these flow management applications:

Possible NSA backdoor and 2015 "Unauthorized Code" incident

In December 2015 Juniper Networks announced that it had found unauthorized code in ScreenOS that had been there since August 2012. The two backdoors it created would allow sophisticated hackers to control the firewall of un-patched Juniper Netscreen products and decrypt network traffic. At least one of the backdoors appeared likely to have been the effort of a governmental interest. There was speculation in the security field about whether it was the NSA.[2] Many in the security industry praised Juniper for being transparent about the breach.[2] WIRED speculated that the lack of details that were disclosed and the intentional use of a random number generator with known security flaws could suggest that it was planted intentionally.[2]

NSA and GCHQ

A 2011 leaked NSA document says that GCHQ had current exploit capability against the following ScreenOS devices: NS5gt, N25, NS50, NS500, NS204, NS208, NS5200, NS5000, SSG5, SSG20, SSG140, ISG 1000, ISG 2000. The exploit capabilities seem consistent with the program codenamed FEEDTROUGH.[3]

Versions
ScreenOS version Release date End of Support End of life
6.3.0r24[1] July 2017
6.0 19 April 200719 April 201019 April 2011
5.4 24 July 200624 July 200924 July 2010
5.3 24 October 200524 October 200824 October 2009
5.2 11 May 200511 May 200811 May 2009
5.1 22 October 200422 October 200722 October 2008
5.0 18 December 200318 December 200618 December 2007
4.0 1 August 200231 October 200631 October 2007
gollark: Or any plan, because it's not an actual thinking agent and it doesn't have goals.
gollark: "Nature" does not have a coherent plan.
gollark: Developed countries have lower birthrates and stuff, having people *die* is not a very good thing.
gollark: You also get lots of people dying, but you get immuniy!
gollark: No, if everyone is infected you get immunity!

References
  1. Release Notes 6.3.0r24 Rev 01
  2. Zetter, Kim (27 October 2008). "New Discovery Around Juniper Backdoor Raises More Questions About the Company". WIRED. Retrieved 15 January 2016.
  3. Ryan Gallagher, Glenn Greenwald (23 December 2015). "NSA Helped British Spies Find Security Holes In Juniper Firewalls". Retrieved 27 December 2015.
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.