CVE-2006-6475
FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode with SSL...
FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode with SSL enabled, allows remote attackers to cause a denial of service (refused connections) via malformed requests, which results in a mishandled exception.
Exploit likelihood
What each source reports
NVD Score used
FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode with SSL enabled, allows remote attackers to cause a denial of service (refused connections) via malformed requests, which results in a mishandled exception.
- Record
CVE-2006-6475- CVSS 2.0
- 7.1 High
AV:N/AC:M/Au:N/C:N/I:N/A:C - Updated
- 2026-11-02
CVE List No score
FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode with SSL enabled, allows remote attackers to cause a denial of service (refused connections) via malformed requests, which results in a mishandled exception.
- Record
CVE-2006-6475- Updated
- 2026-11-02
EUVDEUVD-2006-6458 No score
FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode with SSL enabled, allows remote attackers to cause a denial of service (refused connections) via malformed requests, which results in a mishandled exception.
- Record
EUVD-2006-6458- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-x3x5-m6r2-4qr8 No score
FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode with SSL...
FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode with SSL enabled, allows remote attackers to cause a denial of service (refused connections) via malformed requests, which results in a mishandled exception.
- Record
GHSA-x3x5-m6r2-4qr8- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-6475 is a high vulnerability (CVSS 7.1) in Mandiant First Response, published December 20, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.75%, the 77th percentile. No source names a fixed version.