CVE-2008-5133

ipnat in IP Filter in Sun Solaris 10 and OpenSolaris before snv_96, when running on a DNS server with Network Address Translation (NAT) configured, improperly changes the source port of a packet when the destination port is the DNS port, which allows remote attackers to bypass an intended CVE-2008-1447 protection mechanism and spoof the responses to DNS queries sent by named.

• sun opensolaris (<= snv 95) • sun opensolaris snv 01 • sun opensolaris snv 02 • sun opensolaris snv 03 • sun opensolaris snv 04 • sun opensolaris snv 05 • sun opensolaris snv 06 • sun opensolaris snv 07 • sun opensolaris snv 08 • sun opensolaris snv 09 • sun opensolaris snv 10 • sun opensolaris snv 11 • sun opensolaris snv 12 • sun opensolaris snv 13 • sun opensolaris snv 14 • sun opensolaris snv 15 • sun opensolaris snv 16 • sun opensolaris snv 17 • sun opensolaris snv 18 • sun opensolaris snv 19 • sun opensolaris snv 20 • sun opensolaris snv 21 • sun opensolaris snv 22 • sun opensolaris snv 23 • sun opensolaris snv 24 • sun opensolaris snv 25 • sun opensolaris snv 26 • sun opensolaris snv 27 • sun opensolaris snv 28 • sun opensolaris snv 29 • sun opensolaris snv 30 • sun opensolaris snv 31 • sun opensolaris snv 32 • sun opensolaris snv 33 • sun opensolaris snv 34 • sun opensolaris snv 35 • sun opensolaris snv 36 • sun opensolaris snv 37 • sun opensolaris snv 38 • sun opensolaris snv 39 • sun opensolaris snv 40 • sun opensolaris snv 41 • sun opensolaris snv 42 • sun opensolaris snv 43 • sun opensolaris snv 44 • sun opensolaris snv 45 • sun opensolaris snv 46 • sun opensolaris snv 47 • sun opensolaris snv 48 • sun opensolaris snv 49 • sun opensolaris snv 50 • sun opensolaris snv 51 • sun opensolaris snv 52 • sun opensolaris snv 53 • sun opensolaris snv 54 • sun opensolaris snv 55 • sun opensolaris snv 56 • sun opensolaris snv 57 • sun opensolaris snv 58 • sun opensolaris snv 59 … and 36 more