The birthday paradox doesn't apply

What is true is that each sub-domain can be attacked independently, and each must fail for the
overall attack to fail.  On an unpatched server an n-pronged attack will fail with probability
(65535/65536)**n --- n still has to be very large.

The birthday paradox refers to collisions of transaction ids amongst whole groups of requests
and answers where any answer could apply to any request.