Vulnerability in Infoblox Dns One
CVE-2002-2213
The DNS resolver in unspecified versions of Infoblox DNS One, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record (RR) combined with spoofed responses, which increases the possibility of successfully spoofing a response in a way that is more efficient than brute force methods.
EPSS: 0.024 (82.3th percentile) — read the EPSS interpretation.
Affected products
- Infoblox Dns_one
- Isc Bind — versions 4.9, 4.9.2, 4.9.3
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (Patch, x_refsource_MISC)