[LobsterSan]

I took a quick scan of recent topics and didn't see this yet mentioned, but thought it was worthy of a look. If you haven't patched yourself yet, you may want to consider doing so soon as it looks like a fairly important vulnerability.

Here's a little more reading on the subject:

Dan Kaminsky Discovers Fundamental Issue In DNS: Massive Multivendor Patch Released | securosis.com

One note: when I patched my Windows XP installation, I lost my internet connection immediately after reboot. This was due to my version of ZoneAlarms Firewall. If you use ZoneAlarms, you should update to the latest version before you patch your XP installation. If you've already installed, you can temporarily set the "internet zone" to medium, which will allow you to grab the new version and upgrade and then put the settings back on high.

 

[ecclesand]

Thanks for posting this! I installed the Windows Update and lost my Internet and couldn't remember if I had my Internet Zone set to High or Medium in Zone Alarm. So I set it to Medium and went on my way. If you hadn't posted this, I wouldn't have known about the Zone Alarm update because the Auto Update feature in ZA didn't notify me of the new version.

 

[Aimless1]

How timely. Appreciate the info!

 

[fraseyboy]

Interesting news... I can't seem to find a link to the patch... Where is it?

Edit: DW, found it. For those who have disabled windows updates, the patch can be downloaded here http://www.softwarepatch.com/windows...2008-july.html

 

[MCC]

I'm an intern at an IT consulting company and this patch has killed the TCP/IP stack on some scattered machines (including a couple servers), preventing them from receiving SYN/ACKs on TCP port 80 connections. These machines exhibit the same behavior with the firewall turned off, and the issue is fixed with a system restore.

Just an FYI... turn on system restore before applying this patch!

Edit: In english, patch + internet = no.

 

[fraseyboy]

Hmm... I just patched and my internet works fine.

 

[skudmunky]

My internet died with the patch, even with zone alarm off...

 

[fraseyboy]

I don't use zonealarm. Instead I use Comodo. Maybe that's why its not broken?