CVE-2002-2213

2022-10-0316:23:49

mitre

www.cve.org

infoblox

dns resolver

cache poisoning

birthday attack

remote attackers

spoofed responses

6.8 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.0%

JSON

The DNS resolver in unspecified versions of Infoblox DNS One, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record (RR) combined with spoofed responses, which increases the possibility of successfully spoofing a response in a way that is more efficient than brute force methods.