CVE-2002-2212 Other in n/a
Remote attackers can poison the DNS cache of Fujitsu UXP/V systems via a birthday attack, potentially redirecting traffic.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2002-2212?
CVE-2002-2212 is a medium-severity vulnerability in Isc Bind, published on 23 May 2006. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The DNS resolver in unspecified versions of Fujitsu UXP/V, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record (RR) combined with spoofed responses, which increases the possibility of successfully spoofing a response in a way that is more efficient than brute force methods.
Which versions are affected by CVE-2002-2212?
It affects 2 products.
Products include Fujitsu Uxp V, Isc Bind.
How do I fix CVE-2002-2212?
No fix has been published for CVE-2002-2212 yet. Limit exposure of the affected software until one is available.
Is CVE-2002-2212 being exploited?
There is no known exploitation of CVE-2002-2212 in the wild and no public exploit code.
Sources
Also known as GHSA-8m4h-px38-jwwg.