In which of the following attacking methods does an attacker distribute incorrect IP address?

MAC flooding overwhelms a switch's CAM table with fake MAC addresses to force it into hub mode, enabling sniffing; it does not involve distributing incorrect IP addresses.

In DNS cache poisoning, an attacker corrupts a DNS resolver's cache by supplying fraudulent resource records that map legitimate domain names to attacker-controlled IP addresses. When clients query the poisoned resolver they receive the incorrect IP, redirecting their traffic without any indication that the mapping is false.

IP spoofing falsifies the source IP address field in a packet header to impersonate another host; it does not distribute or alter IP-to-domain mappings for other clients.

A man-in-the-middle attack intercepts and potentially modifies traffic between two parties in transit; it is a broader category and does not specifically involve injecting false IP records into a naming system.