Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode with SSL enabled, allows remote attackers to cause a denial of service (refused connections) via malformed requests, which results in a mishandled exception.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mandiant First Response 畸形客户端请求SSL代理拒绝服务漏洞
Vulnerability Description
Mandiant First Response是一款事件响应工具，用于收集所运行进程、系统服务之类的系统信息。 Mandiant First Response中存在多个安全漏洞，具体如下： 畸形客户端请求导致SSL代理拒绝服务 如果以守护程序模式运行的话，First Response代理(FRAgent.exe)会通过HTTP或修改过的HTTPS实现接受First Response控制台的远程连接。如果攻击者向启用了SSL的代理发送了一系列特制请求的话，就会强制代理出现异常，之后代理的套接字会陷入无限的C
CVSS Information
N/A
Vulnerability Type
N/A