Secunia

A vulnerability has been reported in various Cisco products, which can be exploited by malicious people to poison the DNS cache.

The vulnerability is caused due to the DNS servers not sufficiently randomising the DNS transaction ID and the source port number, which can be exploited to poison the DNS cache.

The vulnerability is reported in the following products (please see the vendor's advisory for details).
* Cisco IOS Software
* Cisco Network Registrar
* Cisco Application and Content Networking System

NOTE: DNS Servers that are only authoritative or do not allow recursion are not affected.

Solution
Update to fixed versions (please see vendor advisory for details).

Provided and/or discovered by
The vendor credits Dan Kaminsky, IOActive.

Original Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20080708-dns.shtml

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area