The time to patch those unpatched DNS servers is NOW. Details have leaked.
So what happened? Matasano had an article ready with some more details on the DNS vulnerability for after Blackhat and posted it in error. They removed it as soon as they noticed it. But it seems, the cat is out of the bag. I won’t post the details here out of respect for Dan and Thomas. But I’m sure within a day, it will be all over the place.
Notes