Vulnerability

    InoculateIT Real-Time Exchange Scanner

Affected

    InoculateIT for Windows NT v4.53 Build 169, Agent for Microsoft Exchange

Description

    Bob Duffett  found following.   This product  has a  major defect.
    You  can  have  it  running  on  your  Exchange Server with 1000es
    mailboxes yet viruses will keep spreading directly from email.  It
    is ONLY scanning the Inbox  folder tree.  This would  sound simply
    like a poor design but it is MUCH worse.

    The Inbox Rules Wizard can store the user's rules on the  Exchange
    Server which will move a message to a specific folder without  the
    message ever being placed  in a user's inbox.   This causes it  to
    comletely by-pass the InoculateIT Real-Time Scanner.

Solution

   CA rep confirmed the problem with CA support who had no work-around
   available at this time.