Top 10 winner

DNS poisoning via Port Exhaustion

Roee Hay and Yair Amit · IBM Application Security Insider · 18 October 2011

Announces a whitepaper on poisoning stub resolvers by exhausting the source ports available to a client, collapsing DNS query entropy. Two flaws are disclosed: a remote variant driven by Java applets (CVE-2011-3552, CVE-2010-4448) yielding cookie, NTLM and clipboard theft and firewall bypass, and a local variant letting an unprivileged Windows user poison other users.

Record

Researcher

Roee Hay and Yair Amit

Published by

IBM Application Security Insider

Date

18 October 2011

Topic

Other

In the archive

• Ranked #3 in the 2011 Top 10 Web Hacking Techniques

Tags

• dns
• cache-poisoning
• java
• cve
• privilege-escalation
• info-leak
• vendor-advisory
• owasp-a01-2021

This page is the archive's own catalogue record. The research is the work of Roee Hay and Yair Amit, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 10 September 2026.