GCVE - cpe:2.3:a:mandiant:first_response:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mandiant:first_response:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Mandiant (`60f1f490-0340-5b99-aac7-47a0cc7eb2bb`)
Product	First Response (`d43ff315-6e6f-51fb-b563-e20e66ce3929`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-6477`	vulnerable	2026-06-08 04:49:28.937520	Details available FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode and configured to use only HTTP, allows local users to modify requests and responses between a client and an agent by hijacking an HTTP FRAgent daemon and conducting a man-in-the-middle (MITM) attack. Published: 2006-12-20T02:00:00.000Z Updated: 2024-08-07T20:26:46.458Z Open on db.gcve.eu Reference links http://www.mandiant.com/firstresponse.htm http://www.securityfocus.com/archive/1/454712/100/0/threaded http://secunia.com/advisories/23393 http://www.vupen.com/english/advisories/2006/5061 http://www.securityfocus.com/bid/21548	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-6476`	vulnerable	2026-06-08 04:49:28.937142	Details available FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode and when the agent is bound to 0.0.0.0 (all interfaces), opens sockets in non-exclusive mode, which allows local users to hijack the socket, and capture data or cause a denial of service (loss of daemon operation). Published: 2006-12-20T02:00:00.000Z Updated: 2024-08-07T20:26:46.545Z Open on db.gcve.eu Reference links http://www.mandiant.com/firstresponse.htm http://www.securityfocus.com/archive/1/454712/100/0/threaded http://secunia.com/advisories/23393 http://www.vupen.com/english/advisories/2006/5061 http://www.securityfocus.com/bid/21548	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-6475`	vulnerable	2026-06-08 04:49:28.936694	Details available FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode with SSL enabled, allows remote attackers to cause a denial of service (refused connections) via malformed requests, which results in a mishandled exception. Published: 2006-12-20T02:00:00.000Z Updated: 2024-08-07T20:26:46.553Z Open on db.gcve.eu Reference links http://www.mandiant.com/firstresponse.htm http://www.securityfocus.com/archive/1/454712/100/0/threaded http://secunia.com/advisories/23393 http://www.vupen.com/english/advisories/2006/5061 http://www.securityfocus.com/bid/21548	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.