CVE-2006-6476: Low severity Mandiant First Response vulnerability
Published Dec 20, 2006
·Updated
FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode and when the agent is bound to 0.0.0.0 (all interfaces), opens sockets in non-exclusive mode, which allows local users to hijack the socket, and capture data or cause a denial of service (loss of daemon operation).
Affected Software
1 affected component
Mandiant First Response<=1.1
Remediation
Patch Available
Patch Available
Patch Available
Event History
Dec 20, 2006
CVE Published
02:28 AM
Data Sourced
via NVD·02:28 AM
RemedyDescriptionSeverityAffected Software
CVE Published
via MITRE·07:00 AM
Data Sourced
via MITRE·07:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-6476?
CVE-2006-6476 has been classified as a medium severity vulnerability.
2
How do I fix CVE-2006-6476?
To fix CVE-2006-6476, upgrade to Mandiant First Response version 1.1.1 or later.
3
What software is affected by CVE-2006-6476?
CVE-2006-6476 affects Mandiant First Response versions before 1.1.1.
4
What vulnerability does CVE-2006-6476 describe?
CVE-2006-6476 describes a flaw in FRAgent.exe that allows local users to hijack sockets when run in daemon mode.
5
Can CVE-2006-6476 cause a denial of service?
Yes, CVE-2006-6476 can lead to denial of service by interrupting the daemon operation.