CVE-2003-1331

CVE-2003-1331 describes a stack-based buffer overflow in the mysql_real_connect function of the MySQL client library (libmysqlclient) versions 4.0.13 and earlier, specifically impacting Oracle MySQL. This vulnerability allows local users to execute arbitrary code by providing an excessively long socket name. The vulnerability has a CVSS score of 4.0, indicating a medium severity. While the attack vector is network-based, the attack complexity is high, and the potential impact is limited to partial integrity and availability. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Despite its age, the CVE has garnered significant community discussion with 11 mentions, though it has received no media coverage.