A DNS design flaw, which could have allowed remote attackers to silently hijack web sessions, prompted Tuesday's release of an unprecedented multivendor patch.