CVE-2007-2188

eXtremail 2.1.1 and earlier does not verify the ID field aka transaction id in DNS responses, which makes it easier for remote attackers to conduct DNS spoofing...

CVE-2007-2188

The CVE-2007-2188 entry concerns eXtremail 2.1.1 and earlier, where the application does not verify the DNS response ID (transaction ID). Root cause: lack of verification in DNS responses, enabling remote attackers to perform DNS spoofing. Impact is described as complete confidentiality, integrit...