CVE-2002-2213 Other in n/a
Remote attackers can poison the DNS cache of Infoblox DNS One via a birthday attack, potentially redirecting users to malicious sites.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2002-2213?
CVE-2002-2213 is a medium-severity vulnerability in Isc Bind, published on 23 May 2006. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The DNS resolver in unspecified versions of Infoblox DNS One, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record (RR) combined with spoofed responses, which increases the possibility of successfully spoofing a response in a way that is more efficient than brute force methods.
Which versions are affected by CVE-2002-2213?
It affects 2 products.
Products include Infoblox Dns One, Isc Bind.
How do I fix CVE-2002-2213?
No fix has been published for CVE-2002-2213 yet. Limit exposure of the affected software until one is available.
Is CVE-2002-2213 being exploited?
There is no known exploitation of CVE-2002-2213 in the wild and no public exploit code.
Sources
Also known as GHSA-x529-934r-2q9p.