According to PandaLabs, the latest vulnerability patch issued by Microsoft failed to patch the vulnerability it was meant to fix. Update MS09-008 released yesterday was intended to patch Windows DNS and WINS Servers.

However, PandaLabs says that the patch doesn’t effectively protect against a vulnerability in DNS servers that could be exploited to redirect users to a malicious proxy. The remaining vulnerability could allow nefarious users to monitor the surfer's movement's online, access confidential info, and redirect them to malicious websites.

"If an attacker manages to redirect targeted users to a malicious proxy they could obtain private information, redirect them to malicious pages in order to infect them with malware or monitor their Internet movements, etc.," explains Luis Corrons, Technical Director of PandaLabs.

Via PandaLabs