Vulnerability in multiple DNS implementations

Researcher Dan Kaminsky discovered a fundamental issue in the DNS protocol that affects multiple DNS implementations -- both client and server. It has been described to be very serious, with very little info on how the actual flaw is actually exploited (other than it's related to DNS cache poisoning). DNS implementations with randomized source ports are supposed to counter it.

Here's a good CERT link to bookmark -- it will be updated periodically to show which vendors are vulnerable. As of now it looks like several major vendors including Microsoft are vulnerable.

The first link says that you can go to Dan's site at www.doxpara.com to see if you're vulnerable. But at the moment, it looks like the site is down, courtesy of Slashdot.