DSA-1623 dnsmasq - DNS cache poisoning
Dan Kaminsky discovered that properties inherent to the DNS protocol
lead to practical DNS cache poisoning attacks. Among other things,
successful attacks can lead to misdirected web traffic and email
rerouting.
Read the full story: DSA-1623 dnsmasq - DNS cache poisoning: http://www.debian.org/security/2008/dsa-1623