CVE-2006-6475
FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode with SSL...
CVE-2006-6475 is a high vulnerability (CVSS 7.1) in Mandiant First Response, published December 20, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.75%, the 78th percentile. No source names a fixed version.
- Severity
- 7.1 HighCVSS 2.0, NVD
- Exploit chance
- 1.75%EPSS, 78th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode with SSL enabled, allows remote attackers to cause a denial of service (refused connections) via malformed requests, which results in a mishandled exception.
Exploit likelihood
Affected products
What each source reports
NVD Score used
FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode with SSL enabled, allows remote attackers to cause a denial of service (refused connections) via malformed requests, which results in a mishandled exception.
- Record
CVE-2006-6475- CVSS 2.0
- 7.1 High
AV:N/AC:M/Au:N/C:N/I:N/A:C - Updated
- 2026-11-02
CVE ListNo score
FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode with SSL enabled, allows remote attackers to cause a denial of service (refused connections) via malformed requests, which results in a mishandled exception.
- Record
CVE-2006-6475- Updated
- 2026-11-02
EUVDEUVD-2006-6458No score
FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode with SSL enabled, allows remote attackers to cause a denial of service (refused connections) via malformed requests, which results in a mishandled exception.
- Record
EUVD-2006-6458- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-x3x5-m6r2-4qr8No score
FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode with SSL...
FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode with SSL enabled, allows remote attackers to cause a denial of service (refused connections) via malformed requests, which results in a mishandled exception.
- Record
GHSA-x3x5-m6r2-4qr8- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.