NATJACK AT BLACK HAT: A NEW WAY TO CRACK NAT'S TRUST GAP

Summary from the TLDR IT newsletter

NatJack is a class of attacks that manipulates NAT connection-tracking tables to hijack connections, poison DNS responses, or trigger denial of service. Testing covered 32 products and configurations across 13 vendors, with every implementation vulnerable to at least some of the techniques tested.