DNS Protocol Flaw

[Blaze]

http://securosis.com/2008/07/08/dan-kaminsky-discovers-fundamental-issue-in-dns-massive-multivendor-patch-released/

More info at: http://www.doxpara.com/

Neat. 

[iago]

It's pretty cool, but in my opinion Kaminsky handled it really badly. He was more interested in hyping it up for Blackhat than for actually helping people.

H D Moore has already added an exploit for it to Metasploit:
http://www.caughq.org/exploits/CAU-EX-2008-0002.html

Fun stuff!