Amit Klein has reported a vulnerability in BIND, which can be exploited by malicious people to poison the DNS cache.

The vulnerability is caused due to predictable query IDs in outgoing queries (e.g. if BIND works as resolver or when sending NOTIFYs to slaves) and can be exploited to poison the DNS cache when the query ID is guessed.

Reportedly, the probability to guess the next query ID is between 25% and 43%, depending on the handled DNS traffic.

The vulnerability is reported in BIND 8.x versions prior to 8.4.7-P1.

Solution
Update to BIND 8.4.7-P1.
Further details available to Secunia VIM customers

Provided and/or discovered by
Amit Klein

Original Advisory
ISC:
http://www.isc.org/index.pl?/sw/bind/bind8-eol.php

Trusteer:
http://www.trusteer.com/docs/bind8dns.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers