DNS Cache Poisoning

An attack that injects forged DNS records into a resolver's cache, redirecting users to malicious servers without their knowledge. Attackers exploit the transaction ID space or race conditions in legacy resolvers to insert fraudulent answers. DNSSEC mitigates this by cryptographically validating records, and source port randomization reduces attack success rates.