CVE-2005-0644

Buffer overflow in McAfee Scan Engine 4320 with DAT version before 4436 allows remote attackers to execute arbitrary code via a malformed LHA file with a type 2 header file name field, a variant of CVE-2005-0643.

• http://images.mcafee.com/misc/McAfee_Security_Bulletin_05-march-17.pdfVendor Advisory
• http://secunia.com/advisories/14628
• http://securitytracker.com/id?1013463
• http://www.kb.cert.org/vuls/id/361180Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/10243Exploit
• http://www.securityfocus.com/bid/12832
• http://xforce.iss.net/xforce/alerts/id/190Vendor Advisory
• http://images.mcafee.com/misc/McAfee_Security_Bulletin_05-march-17.pdfVendor Advisory
• http://secunia.com/advisories/14628
• http://securitytracker.com/id?1013463
• http://www.kb.cert.org/vuls/id/361180Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/10243Exploit
• http://www.securityfocus.com/bid/12832
• http://xforce.iss.net/xforce/alerts/id/190Vendor Advisory

Published

May 2, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-0638xloadimage before 4.1-r2, and xli before 1.17, allows attack…
• CVE-2005-0639Multiple vulnerabilities in xli before 1.17 may allow remote…
• CVE-2005-0640Computer Associates (CA) Unicenter Asset Management (UAM) 4.…
• CVE-2005-0641Cross-site scripting (XSS) vulnerability in the Reporter for…
• CVE-2005-0642SQL injection vulnerability in the Query Designer for Comput…
• CVE-2005-0643Buffer overflow in McAfee Scan Engine 4320 with DAT version …
• CVE-2005-0645Cross-site scripting (XSS) vulnerability in show.inc.php in …
• CVE-2005-0646SQL injection vulnerability in auth.php in paNews 2.0.4b all…
• CVE-2005-0647admin_setup.php in paNews 2.0.4b allows remote attackers to …
• CVE-2005-0648Multiple vulnerabilities in Pixel-Apes SafeHTML before 1.3.0…
• CVE-2005-0649Pixel-Apes SafeHTML before 1.2.1 allows remote attackers to …
• CVE-2005-0650Multiple cross-site scripting (XSS) vulnerabilities in Proje…