CVE-2003-0780

CVE-2003-0780 describes a critical buffer overflow vulnerability in the get_salt_from_password function of MySQL versions 4.0.14 and earlier, and 3.23.x. This flaw allows authenticated attackers with ALTER TABLE privileges to execute arbitrary code by supplying an excessively long Password field, impacting various Linux distributions and Oracle MySQL products. The vulnerability carries a CVSS score of 9.0, indicating high severity. It is easily exploitable over the network with low attack complexity, and successful exploitation can lead to complete compromise of confidentiality, integrity, and availability. While not listed on the CISA KEV catalog or Hot List, exploit code for this vulnerability is publicly available on ExploitDB. Despite its age and the availability of exploit code, there is no evidence of active exploitation in the wild, nor significant community discussion or media coverage.