Dual DHCP DNS Server DNS Cache Poisoning Vulnerability

A DNS cache poisoning vulnerability has been identified in Dual DHCP DNS Server versions through 8.01. The issue arises because the server improperly accepts and caches UDP DNS responses without verifying that they come from a legitimate upstream DNS server. This flaw allows remote attackers to inject forged DNS responses, poison the DNS cache, and potentially redirect users to malicious sites.

Impact

Exploitation of this vulnerability allows for DNS cache poisoning, where forged DNS responses are injected into the server's cache. This can lead to legitimate DNS clients being redirected to attacker-controlled destinations.