Unrated severityNVD Advisory· Published Dec 20, 2006· Updated Jun 16, 2026
CVE-2006-6477
CVE-2006-6477
Description
FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode and configured to use only HTTP, allows local users to modify requests and responses between a client and an agent by hijacking an HTTP FRAgent daemon and conducting a man-in-the-middle (MITM) attack.
Affected products
2cpe:2.3:a:mandiant:first_response:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mandiant:first_response:*:*:*:*:*:*:*:*range: <=1.1
- (no CPE)range: <1.1.1
Patches
Vulnerability mechanics
References
8- secunia.com/advisories/23393nvdPatchVendor Advisory
- securitytracker.com/idnvdPatch
- www.securityfocus.com/bid/21548nvdPatch
- www.symantec.com/enterprise/research/SYMSA-2006-013.txtnvdPatch
- securityreason.com/securityalert/2052nvd
- www.mandiant.com/firstresponse.htmnvd
- www.securityfocus.com/archive/1/454712/100/0/threadednvd
- www.vupen.com/english/advisories/2006/5061nvd
News mentions
0No linked articles in our index yet.