Last Updated: May 6, 2020, 10:45 AM CET
We would like to inform you that we have identified an issue in earlier versions of the product of our Windows business products, specifically:
ESET Endpoint Antivirus/ESET Endpoint Security 5
ESET Endpoint Antivirus/ESET Endpoint Security 6.5.2000+
ESET File Security for Windows 6.5.12000+
ESET Mail Security for Microsoft Exchange Server 6.5
- ESET Security for Kerio 6.5
- ESET Mail Security for Lotus Domino 6.5.14026
- ESET Security for Sharepoint Server 6.5
- ESET NOD32 Antivirus/ESET Smart Security 9
This issue DOES NOT affect the latest versions of our products including the latest ESET Endpoint Antivirus/ESET Endpoint Security – 6.6.2089, 7.2 and 7.3 and ESET File Security for Windows 7.1.12008 and customers using the latest versions are not affected in any way. This issue is relevant to the impacted versions listed and described above. The newest versions of our products are NOT affected.
ESET has identified that our kernel has a problem with verification of the timestamp of an already expired certificate (expired by 7th Feb 2020). This method fails and our modules in older, legacy versions, are declared as untrusted and therefore are not loaded. This mechanism ensures that no untrusted library is loaded.
As a result, the affected versions fail to load modules (Firewall, HIPS, Updated, Device Control, Web and Email protection) and are not functional, therefore the protection is not functional.
Symptoms
For versions older than 5.0.2271.x symptoms are:
- Failed loading of modules for v5 family
- GUI of the main window is in English and the logo shows ESET Smart Security 5 instead of Endpoint Security
For versions 6.5.x symptoms are:
- Product reports "Anti-Phishing protection is non-functional"
- Product reports that it is not activated
- Product’s advanced settings have features missing
If they are managed by our ESET Remote Administrator or ESET Security Management Center, they will fall back to the respective parametric group and report an alert as not being activated and the antiphishing module as not functional.
How to identify the affected computers on the network
ESET Security Management Center 7.1.27.0
Navigate to Computers screen.
In the tree hierarchy select group All and select the checkbox in filter Show Subgroups (to display all computers).
Click [ADD FILTER] button. Select filter Version.
Type requested product version to added filter Version and confirm by pressing Enter on the keyboard.
ESET Remote Administrator 6.5.34.0
New window New Template - Basic will appear, where you create a new template for Dynamic group in the part Basic, name your template, e.g. EES_5.0.2260.1_template.
Click the part EXPRESSION and click + ADD RULE.
Select item Application version under the Installed software root and confirm by clicking [OK].
In the newly created rule, type the requested version of installed software, e.g. 5.0.2260.1.
Click the [FINISH] button in the part SUMMARY.
You can see the overview of current settings for Dynamic group. If everything is OK, click the [FINISH] button.
New Dynamic group is created.
ECA 1.2.11.0 (does not support Endpoint 5)
Navigate to Computers screen.
In the tree hierarchy select group All and select the checkbox in filter Show Subgroups (to display all computers).
Click [ADD FILTER] button.
Select filter Version
Type requested product version to added filter Version and confirm by pressing Enter on the keyboard.
ERA 5.3.39.0
Navigate to Tools -> Group Manager.
Navigate to Parametric Groups.
Create new Parametric Group, where all computers with specific version of installed product will be displayed.
Click the [Create] button and you can name your Parametric Group (field NAME), e.g. 5.0.2260.
Click the EDIT… button and then select the check box Product Version IS (specify).
Click specify and Enter rule condition e.g. Equal to 5.0.2260 and click the button Add.
Field Rule condition list (OR) displays Equal to 5.0.2260.
Confirm by clicking [OK] – 3 times.
New Parametric group is created and after selecting the checkbox by Parametric groups - 5.0.2260 requested computers are displayed.
Solution
If you have installed ESET Endpoint product 5.x on your computer, see our instructions.
If you have installed ESET Endpoint product 6.5 on your computer, see our instructions.
If you have installed ESET Security product for Windows Servers 6.5 on your computer, see our instructions.
