Blue Coat products contain a flaw that may allow a malicious user to poison a recursive DNS cache. The issue is triggered by a weakness in the algorithm used to generate random DNS transaction IDs, which combined with a static source port for all DNS queries can allow an attacker to spoof a DNS response packet. It is possible that the flaw may allow a remote attacker to poison a DNS cache resulting in a loss of integrity.

Blue Coat has released several patches to address this vulnerability.

• Secunia Advisory ID: 31137 31151 31152 31153
• Other Advisory URL: http://www.bluecoat.com/support/security-advisories/dns_cache_poisoning

• dan kaminsky - IOActive

NVD does not currently have a CVSSv2 score assigned.