New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables

A new attack class, dubbed NatJack, has been disclosed that allows attackers to hijack active TCP sessions and spoof DNS responses by manipulating NAT connection state. The vulnerability exists in both Windows and Linux implementations, requiring privileged access to a system behind the same NAT as the victim. While no…