I am trying to understand this DNS cache poisoning from a textbook.

enter image description here

Is it the case that the server does not check any pending requests for a given domain and will send all of the n "same" requests to the DNS Lookup?

If the attacker manages to guess one Query ID and poison the cache why don't the other legitimate DNS replies overwrite the poisoned cache when they come back?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.