CVE-2006-6476 FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode and when the agent is bound to 0.0.0.0 (all interfaces), opens sockets in non-exclusive mode, which allows local user...
LowCVSS 2.4
EPSS 0.27%
- Published
- Updated
- Exploit status
- No public exploit known
Description
FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode and when the agent is bound to 0.0.0.0 (all interfaces), opens sockets in non-exclusive mode, which allows local users to hijack the socket, and capture data or cause a denial of service (loss of daemon operation).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mandiant first response | <= 1.1 | No fix listed |
References
- 23393 patch third-party-advisory vendor-advisory
- 2052 third-party-advisory
- 1017394 patch vdb-entry
- www.mandiant.com
- 20061218 SYMSA-2006-013: Multiple Vulnerabilities in Mandiant First Response mailing-list
- 21548 patch vdb-entry
- www.symantec.com patch
- ADV-2006-5061 vdb-entry