Major DNS vulnerability discovered

Dan Kaminsky recently discovered a vulnerability in the DNS protocol that could lead to DNS cache poisoning attacks. When a DNS lookup is made, the DNS server returns a random query id between 1 and 65,000. What Dan found is that the query id’s that were being generated by a lot of the DNS servers were not all that random, allowing someone to potentially poison a DNS cache by anticipating the query id. You can read more about this issue here. The Ubuntu security report is here. I would strongly recommend that you upgrade your DNS servers ASAP if you haven’t already.