Multiple vulnerabilities in First Response

Описание

Multiple serious vulnerabilities have been found in First Response. Malicious users can exploit these vulnerabilities to cause denial of service or hijack user packets. Below is a complete list of vulnerabilities

1. Non-exclusive socket mode can be exploited locally;
2. Vectors related to FRAgent with enabled SSL can be exploited via specially designed requests;
3. Vectors related to FREgent with only HTTP configured to use can be exploited locally via man-in-the-middle attacks.

Первичный источник обнаружения

Связанные продукты

• First-Response

Список CVE

• CVE-2006-6477
  warning
• CVE-2006-6476
  warning
• CVE-2006-6475
  high

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com