CVE-2008-5133

ipnat in IP Filter in Sun Solaris 10 and OpenSolaris before snv_96, when running on a DNS server with Network Address Translation (NAT) configured, improperly changes the source port of a packet when the destination port is the DNS port, which allows remote attackers to bypass an intended CVE-2008-1447 protection mechanism and spoof the responses to DNS queries sent by named.

• CWE-264

• http://secunia.com/advisories/32625Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-245206-1Patch, Vendor Advisory
• http://www.vupen.com/english/advisories/2008/3129
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46721
• http://secunia.com/advisories/32625Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-245206-1Patch, Vendor Advisory
• http://www.vupen.com/english/advisories/2008/3129
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46721

Published

Nov 18, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-5127Ocean12 Contact Manager Pro 1.02 stores sensitive informatio…
• CVE-2008-5128Ocean12 Membership Manager Pro stores sensitive information …
• CVE-2008-5129Ocean12 Poll Manager Pro 1.00 stores sensitive information u…
• CVE-2008-5130Ocean12 Calendar Manager Gold 2.04 stores sensitive informat…
• CVE-2008-5131Multiple SQL injection vulnerabilities in Develop It Easy Ne…
• CVE-2008-5132SQL injection vulnerability in inc/ajax/ajax_rating.php in M…
• CVE-2008-5134Buffer overflow in the lbs_process_bss function in drivers/n…
• CVE-2008-5135os-prober in os-prober 1.17 allows local users to overwrite …
• CVE-2008-5136tkusr in tkusr 0.82 allows local users to overwrite arbitrar…
• CVE-2008-5137tkman in tkman 2.2 allows local users to overwrite arbitrary…
• CVE-2008-5138passwdehd in libpam-mount 0.43 allows local users to overwri…
• CVE-2008-5139updatejail in jailer 0.4 allows local users to overwrite arb…