Versions including both 4.9.x prior to 4.9.8 and 8.2.x are not secure, according to the CERT.The day after the CERT and Network Associates' PGP security subsidiary sent out the warnings, 33.3 per cent of Fortune 1000 sites were using a bad version of BIND and 40.27 per cent of .coms were vulnerable.