Another DNS Flaw Found, Patched

darthcamaro writes "Remember the big DNS flaw that Dan Kaminsky 'discovered' last year? Well, it looks like another flaw in DNS has just been patched. This time it's an item that affects DNSSEC, which was supposed to be the savior for the Kaminsky flaw. The good news, though, is that this time, the issue is relatively minor and DNS has already been patched. 'The flaw is specific to certain usages of DNSSEC,' Joao Damas, senior programming manager of the ISC told InternetNews. 'It is strongly advised that all BIND DNSSEC deployments update in case they are using the particular pattern affected (DSA keys in some cases) and to prevent coming across the problem in the future unexpectedly.'"

Comments

Re:Only if you're using BIND and DNSSEC

[hairyfeet]

Slightly OT, but since it is a DNS question and I have NO freaking clue where else to ask this, here goes. Does anyone know of a good easy to set up and use DNS server for Win2K Pro? I have been using Treewalk, which is nice, easy to maintain and low resource, but with it not having been updated since '05 and all these DNS hacks coming out I think it might be time to switch. Any ideas on what would make a good, preferably low resource replacement?