Sybergen Secure Desktop Route Table Vulnerability

Reported June 30 by Anders Ingeborn

VERSIONS EFFECTED
Sybergen Secure Desktop 2.1

DESCRIPTION

Sybergen"s Secure Desktop does not protect against false router advertisements, which allows an intruder to add routes at will. In addition, if the route table contains numerous false entries and a user clear them the firewall will silently crash, requiring a reboot to restart the firewall.

VENDOR RESPONSE

According to the discoverer, Sybergen is aware of the issue however no response was known at the time of this writing.

CREDITS
Discovered and reported by Anders Ingeborn