Unrated severityNVD Advisory· Published Dec 20, 2006· Updated Jun 16, 2026
CVE-2006-6476
CVE-2006-6476
Description
FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode and when the agent is bound to 0.0.0.0 (all interfaces), opens sockets in non-exclusive mode, which allows local users to hijack the socket, and capture data or cause a denial of service (loss of daemon operation).
Affected products
2cpe:2.3:a:mandiant:first_response:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mandiant:first_response:*:*:*:*:*:*:*:*range: <=1.1
- (no CPE)range: <1.1.1
Patches
Vulnerability mechanics
References
8- secunia.com/advisories/23393nvdPatchVendor Advisory
- securitytracker.com/idnvdPatch
- www.securityfocus.com/bid/21548nvdPatch
- www.symantec.com/enterprise/research/SYMSA-2006-013.txtnvdPatch
- securityreason.com/securityalert/2052nvd
- www.mandiant.com/firstresponse.htmnvd
- www.securityfocus.com/archive/1/454712/100/0/threadednvd
- www.vupen.com/english/advisories/2006/5061nvd
News mentions
0No linked articles in our index yet.