VULNERABILITY INTELLIGENCE

CVE-2008-5133

CVSS score5.8 MEDIUM
EPSS probability1.85%
CISA KEVNot currently listed
Published2008-11-18
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:P

Description

ipnat in IP Filter in Sun Solaris 10 and OpenSolaris before snv_96, when running on a DNS server with Network Address Translation (NAT) configured, improperly changes the source port of a packet when the destination port is the DNS port, which allows remote attackers to bypass an intended CVE-2008-1447 protection mechanism and spoof the responses to DNS queries sent by named.

Primary references