Re: After 6 months - fix available for Microsoft DNS cache poisoning attack

[rick.a.cook@xxxxxxxxx]

After implementing this patch on a large scale network, it was discovered that 
this patch caused a dns memory leak. Microsoft has since corrected this issue 
with a private fix. Even worse, in my large enterprise, this patch caused the 
exact spoofing that it intended to prevent. Somehow the code to increase the 
entropy has caused random xid's to cross and spoof randomly, poisioning the 
cache through normal usage without the use of extracurricular programs. I've 
reported this to Microsoft and have been working with them in fixing this 
issue, which to date has not been fixed.