CVE-2006-6475: High severity Mandiant First Response vulnerability
Published Dec 20, 2006
·Updated
FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode with SSL enabled, allows remote attackers to cause a denial of service (refused connections) via malformed requests, which results in a mishandled exception.
Affected Software
1 affected component
Mandiant First Response<=1.1
Remediation
Patch Available
Patch Available
Patch Available
Event History
Dec 20, 2006
CVE Published
02:28 AM
Data Sourced
via NVD·02:28 AM
RemedyDescriptionSeverityAffected Software
CVE Published
via MITRE·07:00 AM
Data Sourced
via MITRE·07:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-6475?
CVE-2006-6475 has a medium severity rating due to the potential for denial of service attacks.
2
How do I fix CVE-2006-6475?
To fix CVE-2006-6475, upgrade Mandiant First Response to version 1.1.1 or later.
3
What causes the vulnerability in CVE-2006-6475?
CVE-2006-6475 is caused by mishandled exceptions in FRAgent.exe when receiving malformed requests.
4
Who is affected by CVE-2006-6475?
CVE-2006-6475 affects users running Mandiant First Response versions prior to 1.1.1 in daemon mode with SSL enabled.
5
What type of attack does CVE-2006-6475 allow?
CVE-2006-6475 allows remote attackers to cause a denial of service through refused connections.