Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

InoculateIT for Exchange can miss virus without From header

CVE-2000-1244 · published 25 years ago
Summary

The InoculateIT Agent for Exchange Server may fail to detect a malicious attachment when an email’s SMTP header lacks a "From" field. This lets attackers send infected messages past the virus scanner. Update the product to the latest version or apply the vendor’s recommended configuration fix.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
broadcom inoculateit_agent_for_exchange All versions
cpe:2.3:a:broadcom:inoculateit_agent_for_exchange:*:*:*:*:*:*:*:*
Original advisory text
Computer Associates InoculateIT Agent for Exchange Server does not recognize an e-mail virus attachment if the SMTP header is missing the "From" field, which allows remote attackers to bypass virus...
Computer Associates InoculateIT Agent for Exchange Server does not recognize an e-mail virus attachment if the SMTP header is missing the "From" field, which allows remote attackers to bypass virus protection.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
2% chance of attack within 30 days
Timeline
Published31 Dec 2000
Updated29 Oct 2026
First seen29 Sep 2026
Sources
CVE-2000-1244 · NVD
Track software like this
Free during beta