CERT has an advisory out on BIND 9. Any version before 9.2.1 is venerable to 
a denial of service attack.

Joseph Key