CVE-2002-2212

2022-10-0316:23:49

mitre

www.cve.org

fujitsu uxp/v

dns resolver

vulnerability

cache poisoning

birthday attack

remote attackers

spoofed responses

6.8 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.7%

JSON

The DNS resolver in unspecified versions of Fujitsu UXP/V, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record (RR) combined with spoofed responses, which increases the possibility of successfully spoofing a response in a way that is more efficient than brute force methods.