NetSight
medium5.8

CVE-2008-5133

ipnat in IP Filter in Sun Solaris 10 and OpenSolaris before snv_96, when running on a DNS server with Network Address Translation (NAT) configured, improperly …

Impact

ipnat in IP Filter in Sun Solaris 10 and OpenSolaris before snv_96, when running on a DNS server with Network Address Translation (NAT) configured, improperly changes the source port of a packet when the destination port is the DNS port, which allows remote attackers to bypass an intended CVE-2008-1447 protection mechanism and spoof the responses to DNS queries sent by named.

Affected products

VendorProductAffected versions
SunOpensolaris
through snv_95
Versions snv_01, snv_02, snv_03, snv_04, snv_05
SunSolaris
Version 10

Weakness classification

References