CVE-2004-0627

CVE-2004-0627 describes an authentication bypass vulnerability in MySQL versions 4.1.x before 4.1.3 and 5.0. This flaw allows remote attackers to bypass authentication by providing a zero-length scrambled string to the check_scramble_323 function. With a CVSS score of 10.0, this vulnerability is critical, requiring no authentication or complex attack steps, and grants complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog, an exploit is publicly available on ExploitDB, and the vulnerability has garnered significant community discussion, indicating potential for exploitation.