CVE-2006-6476

Severity CVSS v4.0:

Pending analysis

Type:

Unavailable / Other

Publication date:

20/12/2006

Last modified:

09/04/2025

Description

FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode and when the agent is bound to 0.0.0.0 (all interfaces), opens sockets in non-exclusive mode, which allows local users to hijack the socket, and capture data or cause a denial of service (loss of daemon operation).

Impact

Vector 2.0

AV:L/AC:H/Au:S/C:P/I:N/A:P CVSS v2.0 Severity and Metrics:

Base Score: 2.40 LOW
Vector: AV:L/AC:H/Au:S/C:P/I:N/A:P

Attack Vector (AV): Local
Attack Complexity (AC): High
Authentication (Au): Single
Confidentiality (C): Physical
Integrity (I): None
Availability (A): Physical