CVE-2006-6477 json
FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode and configured to use only HTTP, allows local users to m…
published 2006-12-20 19 y ago modified 2026-06-16 4 mo ago also EUVD-2006-6460
- cvss
- 2.4
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.3%
- EPSS 0.3% chance of exploitation in 30 days, percentile 17%
- public exploits
- 0
- none known
Summary
FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode and configured to use only HTTP, allows local users to modify requests and responses between a client and an agent by hijacking an HTTP FRAgent daemon and conducting a man-in-the-middle (MITM) attack.
Patch / fix
Exploit prediction
0.26% chance of exploitation in the next 30 days, higher than 17% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 2.4 | AV:L/AC:H/Au:S/C:N/I:P/A:P |
References
-
secunia.com
/advisories/23393
third-party-advisory, patch, vendor-advisory
-
securityfocus.com
/bid/21548
vdb-entry, patch
-
securitytracker.com
/id?1017394
vdb-entry, patch
-
symantec.com
/enterprise/research/SYMSA-2006-013.txt
patch
- mandiant.com /firstresponse.htm
-
securityfocus.com
/archive/1/454712/100/0/threaded
mailing-list
-
vupen.com
/english/advisories/2006/5061
vdb-entry
-
securityreason.com
/securityalert/2052
third-party-advisory
Sources
- CVE List CVE-2006-6477
- NVD CVE-2006-6477
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.