Exploit code for DNS flaw released

Exploit code [1] for a much touted flaw in the Domain Name System (DNS) has been released. This comes just days after details that the serious vulnerability was inadvertently disclosed [2] by a reverse engineering specialist who independently worked out the weakness. A hacker could leverage upon this vulnerability to poison a DNS's cache and redirect a user's traffic without their knowledge.

Dan Kaminsky, the researcher who originally found the flaw, had known about the vulnerability for months. However, Kaminsky planned to publicly release further details only at the upcoming Black Hat conference in next month. This was to allow both hardware and software vendors to rectify the problem. Amidst reports of major ISP yet to apply this critical DNS patch [3], Kaminsky summed it up in a few words. "Patch. Today. Now. Yes, stay late."

For more on this serious DNS vulnerability:
- check out this vnunet.com article [4]