Security Advisory
CVE-2007-2188
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
eXtremail 2.1.1 and earlier does not verify the ID field (aka transaction id) in DNS responses, which makes it easier for remote attackers to conduct DNS spoofing.