A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious people to poison the DNS cache.

The vulnerability is caused due to the DNS service (dns.exe) using predictable transaction values when sending out queries to upstream DNS servers. This can be exploited to poison the DNS cache via a specially crafted DNS response with a guessed transaction value when the DNS server performs a recursive lookup.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
The vendor credits:
* Amit Klein, Trusteer.
* Alla Berzroutchko, Scanit.

Changelog
Further details available to Secunia VIM customers

Original Advisory
MS07-062 (KB941672):
http://www.microsoft.com/technet/security/Bulletin/MS07-062.mspx

Scanit:
http://www.scanit.be/advisory-2007-11-14.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers