bugtraq - RE: Backdoor in Fortinet´s firewall Fortigate

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <72FE7F2E68051246B961B44297180E7DE7C1@indigo.Blueedge.local>
Date: Thu, 2 Jun 2005 12:01:32 -0700
From: "Matt Gibson" <Mattg@...eedgetech.ca>
To: "Johan Andersson" <andersson@....se>, <bugtraq@...urityfocus.com>
Subject: RE: Backdoor in Fortinet´s firewall Fortigate

I fail to see how this is a "backdoor".

This is how one would reset their master password on the device.

Physical access always trumps all other forms of security.

Cisco routers can have their password reset if you gain physical access to them as well.

And (if nothing else), this method is not new, and is well documented by Fortigate.

Matt Gibson - GSEC FCSE

-----Original Message-----
From: Johan Andersson [mailto:andersson@....se] 
Sent: June 1, 2005 4:10 PM
To: bugtraq@...urityfocus.com
Subject: Backdoor in Fortinet´s firewall Fortigate

If you have console access to this box, you are able to get root access 
or more by using the Username: maintainer
Password: pbcpbn[here should you type the serialnr. of the box, the 
characters should be in Capital letters.]
FortiOS: 2.x

Regards
Johan Andersson
Atea Security, Sweden
Phone: +46-709-19 71 76
Mail: johan.andersson@...a.com