Seems the recent DNS patches are not a magic bullet:

The Internet remains vulnerable to exploits of a critical security flaw in the Domain Name System, a Russian programmer demonstrated last week. Writing on his blog on Friday, Evgeniy Polyakov posted that he had succeeded in getting patched DNS software to return an incorrect location in less than 10 hours.
That doesn't mean that the patches are valueless, but that more work is required on a solution.

OK, I don't think that we need worry about script kiddies and part time criminals here, as the resources required are probably well beyond their means. Unfortunately malicious activity on the internet has taken an increasingly professional criminal turn of late, and the pros certainly can afford it if the rewards are there for the taking.

Full article here:

http://www.crm-daily.com/story.xhtml...d=0300032O5BDC