Secunia

Two vulnerabilities have been reported in Microsoft Windows, which can be exploited by malicious people to poison the DNS cache.

1) An error in the Windows DNS client and Windows DNS server due to insufficient socket entropy when performing DNS queries can be exploited to poison the DNS cache.

2) An error in the Windows DNS server may cause it to accept records from responses outside of the remote server's authority. This can be exploited via specially crafted responses to DNS requests to poison the DNS cache.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
1) The vendor credits Dan Kaminsky, IOActive.
2) Reported by the vendor.

Changelog
Further details available in Customer Area

Original Advisory
MS08-037 (KB953230):
http://www.microsoft.com/technet/security/Bulletin/MS08-037.mspx

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area