Description
FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode and configured to use only HTTP, allows local users to modify requests and responses between a client and an agent by hijacking an HTTP FRAgent daemon and conducting a man-in-the-middle (MITM) attack.
References
- http://www.mandiant.com/firstresponse.htm
- 20061218 SYMSA-2006-013: Multiple Vulnerabilities in Mandiant First Response mailing-list
- 23393 third-party-advisory
- ADV-2006-5061 vdb-entry
- 21548 vdb-entry
- 2052 third-party-advisory
- 1017394 vdb-entry
- http://www.symantec.com/enterprise/research/SYMSA-2006-013.txt