Severity Rating: Important - Revision Note: V2.0 (May 12, 2009): Added an entry in the section, Frequently Asked Questions (FAQ) Related to This Security Update, explaining a detection change. As a result of this change, the MS08-066 update may be offered to affected systems running supported editions of Windows Server 2003 in a non-DNS server role. Microsoft recommends that customers offered the MS08-066 update apply the update at the earliest opportunity. Summary: This security update resolves two privately reported vulnerabilities and two publicly disclosed vulnerabilities in Windows DNS server and Windows WINS server. These vulnerabilities could allow a remote attacker to redirect network traffic intended for systems on the Internet to the attacker’s own systems.

Read more at: http://www.microsoft.com/technet/security/bulletin/MS09-008.mspx?pubDate=2009-05-12