<> Trend Micro Incorporated October 24, 2019 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Trend Micro(TM) Worry-Free(TM) Business Security 10.0 Service Pack 1 Patch - Build 2178 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ NOTICE: This Readme file was current as of the date above. However, all customers are advised to check Trend Micro's website for documentation updates. http://www.trendmicro.com/download TIP: Register online with Trend Micro within 30 days of installation to continue downloading new pattern files and product updates from the Trend Micro website. Register during installation or online at: https://clp.trendmicro.com/FullRegistration?T=TM Contents ========================================================== 1. About Worry-Free Business Security 1.1 Overview of This Release 1.2 Who Should Install This Release 2. What's New 2.1 Enhancements 2.2 Resolved Known Issues 3. Documentation Set 4. System Requirements 5. Installation 5.1 Installing 5.2 Uninstalling 6. Post-Installation Configuration 7. Known Issues 8. Release History 9. Files Included in This Release 10. Contact Information 11. About Trend Micro 12. License Agreement ========================================================== 1. About Worry-Free Business Security ====================================================================== Trend Micro Worry-Free Business Security protects small business users and assets from data theft, identity theft, risky websites, and spam (Advanced Only). 1.1 Overview of This Release =================================================================== This release contains solutions to known issues discovered after the release of Worry-Free Business Security 10.0 Service Pack 1. 1.2 Who Should Install This Release =================================================================== You should install this patch if you are running any build of Worry-Free Business Security 10.0 Service Pack 1. 2. What's New ====================================================================== This release includes the following enhancement and resolves the the following known issues: 2.1 Enhancements =================================================================== There are no enhancements for this patch release. 2.2 Resolved Known Issues =================================================================== This critical patch resolves the following issue: Issue: A possible zero-day vulnerability may allow an attacker to bypass unauthorized log-on protection and launch a Path Traversal Attack on the Worry-Free Business Security web console. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution: This critical patch updates the Worry-Free Business Security server program to remove the vulnerability. 3. Documentation Set ====================================================================== To download or view electronic versions of the documentation set for this product, go to http://docs.trendmicro.com 4. System Requirements ====================================================================== You must install Worry-Free Business Security 10.0 Service Pack 1 before installing this patch. 5. Installation ====================================================================== This section explains key steps for installing the patch. 5.1 Installing =================================================================== To install: 1. Copy the patch executable file to a temporary folder, for example, "C:\temp". 2. Double-click the file. The modules are automatically copied to the correct destination. This patch installation package automatically rolls back the Security Server to its previous configuration if there are problems during installation. If you encounter problems after installation, manually roll back the Security Server to the original configuration. 4.2 Uninstalling =================================================================== To manually roll back to the previous build: 1. Locate the backup folder that the patch package created in the "\PCCSRV\Backup\Patch_B2178" directory. 2. Copy the backup modules to the original folders. 3. Run the "TmTouch.exe" tool to trigger the hotfix mechanism. To run "TmTouch.exe": a. Open a command prompt on the server. b. At the command prompt, browse to "PCCSRV\admin\utility\touch". c. Use the following syntax to run the touch tool: TmTouch.exe {filename} Note: {filename} is the file that you want to roll back. "TmTouch.exe" changes the file creation date to the current system time. 6. Post-installation Configuration ====================================================================== No post-installation steps are required. NOTE: Trend Micro recommends that you update your scan engine and virus pattern files immediately after installing the product. 7. Known Issues ====================================================================== There are no known issues for this patch release. 8. Release History ====================================================================== For more information about updates to this product, go to: https://autoupdate.wfbs.trendmicro.com/static/WFBS/20.0/EN/readme 9. Files Included in this Release ====================================================================== A. Files for Current Issue ------------------------------------------------------------------- Filename Build No. ---------------------------------------------------------------- openssl_template.cnf 2019/10/15 Build.exe 2.86.0.1089 Build64.exe 2.86.0.1089 ciuas32.dll 1.0.0.2075 ciuas64.dll 1.0.0.2075 ciussi32.dll 2.0.0.2074 ciussi64.dll 2.0.0.2074 expapply.dll 8.4.2.0 expapply64.dll 8.4.2.0 expbuild.dll 8.4.2.0 expbuild64.dll 8.4.2.0 icrcauapi.dll 2.5.0.1115 liblwtpciu32.dll 1.0.0.1005 liblwtpciu64.dll 1.0.0.1005 patch.exe 2.86.0.1089 patch64.exe 2.86.0.1089 patchbld.dll 12.21.0.0 PATCHW32.DLL 12.22.0.0 patchw64.dll 12.22.0.0 pbld64.dll 12.20.0.0 psmc.dll 8.4.2.0 psmc64.dll 8.4.2.0 TmUpdate.dll 2.86.0.1089 TmUpdate64.dll 2.86.0.1089 libeay32.dll 1.0.2.19 openssl.exe 1.0.2n ssleay32.dll 1.0.2.19 CLIENTMSISETUP_TEMPLATE_x64 2019/10/15 CLIENTMSISETUP_TEMPLATE_x86 2019/10/15 BMdriver_x32.zip 2019/10/15 BMdriver_x64.zip 2019/10/15 bmservice_x32.zip 2019/10/15 bmservice_x64.zip 2019/10/15 ssapi32_624034.zip 2019/10/15 ssapi64_624034.zip 2019/10/15 ssapi32.dll 6.2.1.4034 TmAegisSysEvt.dll 2.98.0.1201 TMBMCLI.dll 2.98.0.1201 TMBMSRV.exe 2.98.0.1201 tmcomeng.dll 2.98.0.1201 TmEngDrv.dll 2.98.0.1201 TMPEM.dll 2.98.0.1201 tmtap.dll 6.0.0.1074 tmwlutil.dll 2.98.0.1201 ssapi64.dll 6.2.1.4034 resources 2019/10/15 clientconsole.zip 2019/10/15 NTRtScan.exe 20.0.0.2036 AgentStatusDC.zip 2019/10/15 ATTK_prog_x86.zip 2019/10/15 PccNT.exe 20.0.0.2036 Upgrade.exe 20.0.0.2036 tmactmon.cat 2019/10/15 tmactmon.inf 2019/10/15 tmactmon.sys 2.98.0.1185 tmcomm.cat 2019/10/15 tmcomm.inf 2019/10/15 tmcomm.sys 8.20.0.1023 tmevtmgr.cat 2019/10/15 tmevtmgr.inf 2019/10/15 tmevtmgr.sys 2.98.0.1185 ATTK_prog_x64.zip 2019/10/15 Ntrtscan.exe 20.0.0.2036 upgrade.exe 20.0.0.2036 cgiLog.exe 20.0.0.2178 CGIOCommon.dll 20.0.0.2178 cgiRecvFile.exe 20.0.0.2178 CGIShare.dll 20.0.0.2178 isapiClient.dll 20.0.0.2178 isapiClientX64.dll 20.0.0.2178 isapiClientX86.dll 20.0.0.2178 CmdHLClient.dll 20.0.0.2178 DbServer.exe 20.0.0.2178 OfcAutoUpdate.exe 20.0.0.2178 OfcDownload.dll 20.0.0.2178 OfcService.exe 20.0.0.2178 cgiShowLogs.exe 20.0.0.2178 cgiShowSummary.exe 20.0.0.2178 add_server_remoteinstall.js 2019/10/15 B. Files for Previous Issues ------------------------------------------------------------------- Not applicable. C. Network Traffic Required in Deployment ------------------------------------------------------------------- Estimated size (in terms of bandwidth) of deployed client files in this patch. - 32-bit client total = 116.35 MB - 64-bit client total = 158.42 MB 10. Contact Information ====================================================================== A license to Trend Micro software usually includes the right to product updates, pattern file updates, and basic technical support for one (1) year from the date of purchase only. After the first year, you must renew Maintenance on an annual basis at Trend Micro's then-current Maintenance fees. Contact Trend Micro via fax, phone, and email, or visit our website to download evaluation copies of Trend Micro products. http://www.trendmicro.com/us/about-us/contact/index.html NOTE: This information is subject to change without notice. 11. About Trend Micro ====================================================================== Smart, simple, security that fits As a global leader in IT security, Trend Micro develops innovative security solutions that make the world safe for businesses and consumers to exchange digital information. Copyright 2019, Trend Micro Incorporated. All rights reserved. Trend Micro, Worry-Free, and the t-ball logo are trademarks of Trend Micro Incorporated and are registered in some jurisdictions. All other marks are the trademarks or registered trademarks of their respective companies. 12. License Agreement ====================================================================== View information about your license agreement with Trend Micro at: http://www.trendmicro.com/us/about-us/legal-policies/ license-agreements Third-party licensing agreements can be viewed: - By selecting the "About" option in the application user interface - By referring to the "Legal" page of the Administrator's Guide