CVE-2008-5133: Sun Opensolaris

Medium severity, CVSS 5.8. EPSS: 1.9% chance of exploitation in the next 30 days.

ipnat in IP Filter in Sun Solaris 10 and OpenSolaris before snv_96, when running on a DNS server with Network Address Translation (NAT) configured, improperly changes the source port of a packet when the destination port is the DNS port, which allows remote attackers to bypass an intended CVE-2008-1447 protection mechanism and spoof the responses to DNS queries sent by named.

Affected products

• Sun Opensolaris: up to and including snv_95; version snv_01 only; version snv_02 only; version snv_03 only; version snv_04 only; version snv_05 only; …
• Sun Solaris: version 10 only

Published 2008-11-18. Last modified 2026-06-16.