The remote name resolver (or the server it uses upstream) may be vulnerable
to DNS cache poisoning.
Description :
The remote DNS resolver does not use random ports when making queries to
third party DNS servers.
This problem might be exploited by an attacker to poison the remote DNS
server more easily, and therefore divert legitimate traffic to arbitrary
sites.
