Search
Find a vulnerability
Search criteria
6 vulnerabilities found for first_response by mandiant
CVE-2006-6477 (GCVE-0-2006-6477)
Vulnerability from nvd – Published: 2006-12-20 02:00 – Updated: 2024-08-07 20:26
VLAI
EPSS
VEX
Summary
FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode and configured to use only HTTP, allows local users to modify requests and responses between a client and an agent by hijacking an HTTP FRAgent daemon and conducting a man-in-the-middle (MITM) attack.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
8 references
| URL | Tags |
|---|---|
| http://www.mandiant.com/firstresponse.htm | x_refsource_CONFIRM |
| http://www.securityfocus.com/archive/1/454712/100… | mailing-listx_refsource_BUGTRAQ |
| http://secunia.com/advisories/23393 | third-party-advisoryx_refsource_SECUNIA |
| http://www.vupen.com/english/advisories/2006/5061 | vdb-entryx_refsource_VUPEN |
| http://www.securityfocus.com/bid/21548 | vdb-entryx_refsource_BID |
| http://securityreason.com/securityalert/2052 | third-party-advisoryx_refsource_SREASON |
| http://securitytracker.com/id?1017394 | vdb-entryx_refsource_SECTRACK |
| http://www.symantec.com/enterprise/research/SYMSA… | x_refsource_MISC |
Date Public
2006-12-18 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T20:26:46.458Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.mandiant.com/firstresponse.htm"
},
{
"name": "20061218 SYMSA-2006-013: Multiple Vulnerabilities in Mandiant First Response",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/454712/100/0/threaded"
},
{
"name": "23393",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/23393"
},
{
"name": "ADV-2006-5061",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/5061"
},
{
"name": "21548",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/21548"
},
{
"name": "2052",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/2052"
},
{
"name": "1017394",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1017394"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.symantec.com/enterprise/research/SYMSA-2006-013.txt"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-12-18T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode and configured to use only HTTP, allows local users to modify requests and responses between a client and an agent by hijacking an HTTP FRAgent daemon and conducting a man-in-the-middle (MITM) attack."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-17T20:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.mandiant.com/firstresponse.htm"
},
{
"name": "20061218 SYMSA-2006-013: Multiple Vulnerabilities in Mandiant First Response",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/454712/100/0/threaded"
},
{
"name": "23393",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/23393"
},
{
"name": "ADV-2006-5061",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/5061"
},
{
"name": "21548",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/21548"
},
{
"name": "2052",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/2052"
},
{
"name": "1017394",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1017394"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.symantec.com/enterprise/research/SYMSA-2006-013.txt"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-6477",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode and configured to use only HTTP, allows local users to modify requests and responses between a client and an agent by hijacking an HTTP FRAgent daemon and conducting a man-in-the-middle (MITM) attack."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.mandiant.com/firstresponse.htm",
"refsource": "CONFIRM",
"url": "http://www.mandiant.com/firstresponse.htm"
},
{
"name": "20061218 SYMSA-2006-013: Multiple Vulnerabilities in Mandiant First Response",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/454712/100/0/threaded"
},
{
"name": "23393",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/23393"
},
{
"name": "ADV-2006-5061",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/5061"
},
{
"name": "21548",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/21548"
},
{
"name": "2052",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/2052"
},
{
"name": "1017394",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1017394"
},
{
"name": "http://www.symantec.com/enterprise/research/SYMSA-2006-013.txt",
"refsource": "MISC",
"url": "http://www.symantec.com/enterprise/research/SYMSA-2006-013.txt"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-6477",
"datePublished": "2006-12-20T02:00:00.000Z",
"dateReserved": "2006-12-11T00:00:00.000Z",
"dateUpdated": "2024-08-07T20:26:46.458Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-6476 (GCVE-0-2006-6476)
Vulnerability from nvd – Published: 2006-12-20 02:00 – Updated: 2024-08-07 20:26
VLAI
EPSS
VEX
Summary
FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode and when the agent is bound to 0.0.0.0 (all interfaces), opens sockets in non-exclusive mode, which allows local users to hijack the socket, and capture data or cause a denial of service (loss of daemon operation).
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
8 references
| URL | Tags |
|---|---|
| http://www.mandiant.com/firstresponse.htm | x_refsource_CONFIRM |
| http://www.securityfocus.com/archive/1/454712/100… | mailing-listx_refsource_BUGTRAQ |
| http://secunia.com/advisories/23393 | third-party-advisoryx_refsource_SECUNIA |
| http://www.vupen.com/english/advisories/2006/5061 | vdb-entryx_refsource_VUPEN |
| http://www.securityfocus.com/bid/21548 | vdb-entryx_refsource_BID |
| http://securityreason.com/securityalert/2052 | third-party-advisoryx_refsource_SREASON |
| http://securitytracker.com/id?1017394 | vdb-entryx_refsource_SECTRACK |
| http://www.symantec.com/enterprise/research/SYMSA… | x_refsource_MISC |
Date Public
2006-12-18 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T20:26:46.545Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.mandiant.com/firstresponse.htm"
},
{
"name": "20061218 SYMSA-2006-013: Multiple Vulnerabilities in Mandiant First Response",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/454712/100/0/threaded"
},
{
"name": "23393",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/23393"
},
{
"name": "ADV-2006-5061",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/5061"
},
{
"name": "21548",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/21548"
},
{
"name": "2052",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/2052"
},
{
"name": "1017394",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1017394"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.symantec.com/enterprise/research/SYMSA-2006-013.txt"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-12-18T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode and when the agent is bound to 0.0.0.0 (all interfaces), opens sockets in non-exclusive mode, which allows local users to hijack the socket, and capture data or cause a denial of service (loss of daemon operation)."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-17T20:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.mandiant.com/firstresponse.htm"
},
{
"name": "20061218 SYMSA-2006-013: Multiple Vulnerabilities in Mandiant First Response",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/454712/100/0/threaded"
},
{
"name": "23393",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/23393"
},
{
"name": "ADV-2006-5061",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/5061"
},
{
"name": "21548",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/21548"
},
{
"name": "2052",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/2052"
},
{
"name": "1017394",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1017394"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.symantec.com/enterprise/research/SYMSA-2006-013.txt"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-6476",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode and when the agent is bound to 0.0.0.0 (all interfaces), opens sockets in non-exclusive mode, which allows local users to hijack the socket, and capture data or cause a denial of service (loss of daemon operation)."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.mandiant.com/firstresponse.htm",
"refsource": "CONFIRM",
"url": "http://www.mandiant.com/firstresponse.htm"
},
{
"name": "20061218 SYMSA-2006-013: Multiple Vulnerabilities in Mandiant First Response",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/454712/100/0/threaded"
},
{
"name": "23393",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/23393"
},
{
"name": "ADV-2006-5061",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/5061"
},
{
"name": "21548",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/21548"
},
{
"name": "2052",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/2052"
},
{
"name": "1017394",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1017394"
},
{
"name": "http://www.symantec.com/enterprise/research/SYMSA-2006-013.txt",
"refsource": "MISC",
"url": "http://www.symantec.com/enterprise/research/SYMSA-2006-013.txt"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-6476",
"datePublished": "2006-12-20T02:00:00.000Z",
"dateReserved": "2006-12-11T00:00:00.000Z",
"dateUpdated": "2024-08-07T20:26:46.545Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-6475 (GCVE-0-2006-6475)
Vulnerability from nvd – Published: 2006-12-20 02:00 – Updated: 2024-08-07 20:26
VLAI
EPSS
VEX
Summary
FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode with SSL enabled, allows remote attackers to cause a denial of service (refused connections) via malformed requests, which results in a mishandled exception.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
8 references
| URL | Tags |
|---|---|
| http://www.mandiant.com/firstresponse.htm | x_refsource_CONFIRM |
| http://www.securityfocus.com/archive/1/454712/100… | mailing-listx_refsource_BUGTRAQ |
| http://secunia.com/advisories/23393 | third-party-advisoryx_refsource_SECUNIA |
| http://www.vupen.com/english/advisories/2006/5061 | vdb-entryx_refsource_VUPEN |
| http://www.securityfocus.com/bid/21548 | vdb-entryx_refsource_BID |
| http://securityreason.com/securityalert/2052 | third-party-advisoryx_refsource_SREASON |
| http://securitytracker.com/id?1017394 | vdb-entryx_refsource_SECTRACK |
| http://www.symantec.com/enterprise/research/SYMSA… | x_refsource_MISC |
Date Public
2006-12-18 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T20:26:46.553Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.mandiant.com/firstresponse.htm"
},
{
"name": "20061218 SYMSA-2006-013: Multiple Vulnerabilities in Mandiant First Response",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/454712/100/0/threaded"
},
{
"name": "23393",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/23393"
},
{
"name": "ADV-2006-5061",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/5061"
},
{
"name": "21548",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/21548"
},
{
"name": "2052",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/2052"
},
{
"name": "1017394",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1017394"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.symantec.com/enterprise/research/SYMSA-2006-013.txt"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-12-18T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode with SSL enabled, allows remote attackers to cause a denial of service (refused connections) via malformed requests, which results in a mishandled exception."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-17T20:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.mandiant.com/firstresponse.htm"
},
{
"name": "20061218 SYMSA-2006-013: Multiple Vulnerabilities in Mandiant First Response",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/454712/100/0/threaded"
},
{
"name": "23393",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/23393"
},
{
"name": "ADV-2006-5061",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/5061"
},
{
"name": "21548",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/21548"
},
{
"name": "2052",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/2052"
},
{
"name": "1017394",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1017394"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.symantec.com/enterprise/research/SYMSA-2006-013.txt"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-6475",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode with SSL enabled, allows remote attackers to cause a denial of service (refused connections) via malformed requests, which results in a mishandled exception."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.mandiant.com/firstresponse.htm",
"refsource": "CONFIRM",
"url": "http://www.mandiant.com/firstresponse.htm"
},
{
"name": "20061218 SYMSA-2006-013: Multiple Vulnerabilities in Mandiant First Response",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/454712/100/0/threaded"
},
{
"name": "23393",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/23393"
},
{
"name": "ADV-2006-5061",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/5061"
},
{
"name": "21548",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/21548"
},
{
"name": "2052",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/2052"
},
{
"name": "1017394",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1017394"
},
{
"name": "http://www.symantec.com/enterprise/research/SYMSA-2006-013.txt",
"refsource": "MISC",
"url": "http://www.symantec.com/enterprise/research/SYMSA-2006-013.txt"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-6475",
"datePublished": "2006-12-20T02:00:00.000Z",
"dateReserved": "2006-12-11T00:00:00.000Z",
"dateUpdated": "2024-08-07T20:26:46.553Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-6477 (GCVE-0-2006-6477)
Vulnerability from cvelistv5 – Published: 2006-12-20 02:00 – Updated: 2024-08-07 20:26
VLAI
EPSS
VEX
Summary
FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode and configured to use only HTTP, allows local users to modify requests and responses between a client and an agent by hijacking an HTTP FRAgent daemon and conducting a man-in-the-middle (MITM) attack.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
8 references
| URL | Tags |
|---|---|
| http://www.mandiant.com/firstresponse.htm | x_refsource_CONFIRM |
| http://www.securityfocus.com/archive/1/454712/100… | mailing-listx_refsource_BUGTRAQ |
| http://secunia.com/advisories/23393 | third-party-advisoryx_refsource_SECUNIA |
| http://www.vupen.com/english/advisories/2006/5061 | vdb-entryx_refsource_VUPEN |
| http://www.securityfocus.com/bid/21548 | vdb-entryx_refsource_BID |
| http://securityreason.com/securityalert/2052 | third-party-advisoryx_refsource_SREASON |
| http://securitytracker.com/id?1017394 | vdb-entryx_refsource_SECTRACK |
| http://www.symantec.com/enterprise/research/SYMSA… | x_refsource_MISC |
Date Public
2006-12-18 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T20:26:46.458Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.mandiant.com/firstresponse.htm"
},
{
"name": "20061218 SYMSA-2006-013: Multiple Vulnerabilities in Mandiant First Response",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/454712/100/0/threaded"
},
{
"name": "23393",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/23393"
},
{
"name": "ADV-2006-5061",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/5061"
},
{
"name": "21548",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/21548"
},
{
"name": "2052",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/2052"
},
{
"name": "1017394",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1017394"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.symantec.com/enterprise/research/SYMSA-2006-013.txt"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-12-18T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode and configured to use only HTTP, allows local users to modify requests and responses between a client and an agent by hijacking an HTTP FRAgent daemon and conducting a man-in-the-middle (MITM) attack."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-17T20:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.mandiant.com/firstresponse.htm"
},
{
"name": "20061218 SYMSA-2006-013: Multiple Vulnerabilities in Mandiant First Response",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/454712/100/0/threaded"
},
{
"name": "23393",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/23393"
},
{
"name": "ADV-2006-5061",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/5061"
},
{
"name": "21548",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/21548"
},
{
"name": "2052",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/2052"
},
{
"name": "1017394",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1017394"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.symantec.com/enterprise/research/SYMSA-2006-013.txt"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-6477",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode and configured to use only HTTP, allows local users to modify requests and responses between a client and an agent by hijacking an HTTP FRAgent daemon and conducting a man-in-the-middle (MITM) attack."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.mandiant.com/firstresponse.htm",
"refsource": "CONFIRM",
"url": "http://www.mandiant.com/firstresponse.htm"
},
{
"name": "20061218 SYMSA-2006-013: Multiple Vulnerabilities in Mandiant First Response",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/454712/100/0/threaded"
},
{
"name": "23393",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/23393"
},
{
"name": "ADV-2006-5061",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/5061"
},
{
"name": "21548",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/21548"
},
{
"name": "2052",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/2052"
},
{
"name": "1017394",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1017394"
},
{
"name": "http://www.symantec.com/enterprise/research/SYMSA-2006-013.txt",
"refsource": "MISC",
"url": "http://www.symantec.com/enterprise/research/SYMSA-2006-013.txt"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-6477",
"datePublished": "2006-12-20T02:00:00.000Z",
"dateReserved": "2006-12-11T00:00:00.000Z",
"dateUpdated": "2024-08-07T20:26:46.458Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-6476 (GCVE-0-2006-6476)
Vulnerability from cvelistv5 – Published: 2006-12-20 02:00 – Updated: 2024-08-07 20:26
VLAI
EPSS
VEX
Summary
FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode and when the agent is bound to 0.0.0.0 (all interfaces), opens sockets in non-exclusive mode, which allows local users to hijack the socket, and capture data or cause a denial of service (loss of daemon operation).
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
8 references
| URL | Tags |
|---|---|
| http://www.mandiant.com/firstresponse.htm | x_refsource_CONFIRM |
| http://www.securityfocus.com/archive/1/454712/100… | mailing-listx_refsource_BUGTRAQ |
| http://secunia.com/advisories/23393 | third-party-advisoryx_refsource_SECUNIA |
| http://www.vupen.com/english/advisories/2006/5061 | vdb-entryx_refsource_VUPEN |
| http://www.securityfocus.com/bid/21548 | vdb-entryx_refsource_BID |
| http://securityreason.com/securityalert/2052 | third-party-advisoryx_refsource_SREASON |
| http://securitytracker.com/id?1017394 | vdb-entryx_refsource_SECTRACK |
| http://www.symantec.com/enterprise/research/SYMSA… | x_refsource_MISC |
Date Public
2006-12-18 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T20:26:46.545Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.mandiant.com/firstresponse.htm"
},
{
"name": "20061218 SYMSA-2006-013: Multiple Vulnerabilities in Mandiant First Response",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/454712/100/0/threaded"
},
{
"name": "23393",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/23393"
},
{
"name": "ADV-2006-5061",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/5061"
},
{
"name": "21548",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/21548"
},
{
"name": "2052",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/2052"
},
{
"name": "1017394",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1017394"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.symantec.com/enterprise/research/SYMSA-2006-013.txt"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-12-18T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode and when the agent is bound to 0.0.0.0 (all interfaces), opens sockets in non-exclusive mode, which allows local users to hijack the socket, and capture data or cause a denial of service (loss of daemon operation)."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-17T20:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.mandiant.com/firstresponse.htm"
},
{
"name": "20061218 SYMSA-2006-013: Multiple Vulnerabilities in Mandiant First Response",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/454712/100/0/threaded"
},
{
"name": "23393",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/23393"
},
{
"name": "ADV-2006-5061",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/5061"
},
{
"name": "21548",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/21548"
},
{
"name": "2052",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/2052"
},
{
"name": "1017394",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1017394"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.symantec.com/enterprise/research/SYMSA-2006-013.txt"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-6476",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode and when the agent is bound to 0.0.0.0 (all interfaces), opens sockets in non-exclusive mode, which allows local users to hijack the socket, and capture data or cause a denial of service (loss of daemon operation)."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.mandiant.com/firstresponse.htm",
"refsource": "CONFIRM",
"url": "http://www.mandiant.com/firstresponse.htm"
},
{
"name": "20061218 SYMSA-2006-013: Multiple Vulnerabilities in Mandiant First Response",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/454712/100/0/threaded"
},
{
"name": "23393",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/23393"
},
{
"name": "ADV-2006-5061",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/5061"
},
{
"name": "21548",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/21548"
},
{
"name": "2052",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/2052"
},
{
"name": "1017394",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1017394"
},
{
"name": "http://www.symantec.com/enterprise/research/SYMSA-2006-013.txt",
"refsource": "MISC",
"url": "http://www.symantec.com/enterprise/research/SYMSA-2006-013.txt"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-6476",
"datePublished": "2006-12-20T02:00:00.000Z",
"dateReserved": "2006-12-11T00:00:00.000Z",
"dateUpdated": "2024-08-07T20:26:46.545Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-6475 (GCVE-0-2006-6475)
Vulnerability from cvelistv5 – Published: 2006-12-20 02:00 – Updated: 2024-08-07 20:26
VLAI
EPSS
VEX
Summary
FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode with SSL enabled, allows remote attackers to cause a denial of service (refused connections) via malformed requests, which results in a mishandled exception.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
8 references
| URL | Tags |
|---|---|
| http://www.mandiant.com/firstresponse.htm | x_refsource_CONFIRM |
| http://www.securityfocus.com/archive/1/454712/100… | mailing-listx_refsource_BUGTRAQ |
| http://secunia.com/advisories/23393 | third-party-advisoryx_refsource_SECUNIA |
| http://www.vupen.com/english/advisories/2006/5061 | vdb-entryx_refsource_VUPEN |
| http://www.securityfocus.com/bid/21548 | vdb-entryx_refsource_BID |
| http://securityreason.com/securityalert/2052 | third-party-advisoryx_refsource_SREASON |
| http://securitytracker.com/id?1017394 | vdb-entryx_refsource_SECTRACK |
| http://www.symantec.com/enterprise/research/SYMSA… | x_refsource_MISC |
Date Public
2006-12-18 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T20:26:46.553Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.mandiant.com/firstresponse.htm"
},
{
"name": "20061218 SYMSA-2006-013: Multiple Vulnerabilities in Mandiant First Response",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/454712/100/0/threaded"
},
{
"name": "23393",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/23393"
},
{
"name": "ADV-2006-5061",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/5061"
},
{
"name": "21548",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/21548"
},
{
"name": "2052",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/2052"
},
{
"name": "1017394",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1017394"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.symantec.com/enterprise/research/SYMSA-2006-013.txt"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-12-18T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode with SSL enabled, allows remote attackers to cause a denial of service (refused connections) via malformed requests, which results in a mishandled exception."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-17T20:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.mandiant.com/firstresponse.htm"
},
{
"name": "20061218 SYMSA-2006-013: Multiple Vulnerabilities in Mandiant First Response",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/454712/100/0/threaded"
},
{
"name": "23393",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/23393"
},
{
"name": "ADV-2006-5061",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/5061"
},
{
"name": "21548",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/21548"
},
{
"name": "2052",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/2052"
},
{
"name": "1017394",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1017394"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.symantec.com/enterprise/research/SYMSA-2006-013.txt"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-6475",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode with SSL enabled, allows remote attackers to cause a denial of service (refused connections) via malformed requests, which results in a mishandled exception."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.mandiant.com/firstresponse.htm",
"refsource": "CONFIRM",
"url": "http://www.mandiant.com/firstresponse.htm"
},
{
"name": "20061218 SYMSA-2006-013: Multiple Vulnerabilities in Mandiant First Response",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/454712/100/0/threaded"
},
{
"name": "23393",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/23393"
},
{
"name": "ADV-2006-5061",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/5061"
},
{
"name": "21548",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/21548"
},
{
"name": "2052",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/2052"
},
{
"name": "1017394",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1017394"
},
{
"name": "http://www.symantec.com/enterprise/research/SYMSA-2006-013.txt",
"refsource": "MISC",
"url": "http://www.symantec.com/enterprise/research/SYMSA-2006-013.txt"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-6475",
"datePublished": "2006-12-20T02:00:00.000Z",
"dateReserved": "2006-12-11T00:00:00.000Z",
"dateUpdated": "2024-08-07T20:26:46.553Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}