CVE-2003-0780

This exploit targets a buffer overflow vulnerability in MySQL 3.23.x/4.0.x by manipulating the user table's password field to inject shellcode. It uses a combination of SQL queries and out-of-band (OOB) data to trigger the overflow and achieve remote code execution.

This exploit demonstrates a buffer overflow vulnerability in MySQL server when handling excessively long user passwords. By altering the password field to a LONGTEXT type and updating it with an overly long string, an attacker with administrative privileges can trigger a buffer overflow, potentially leading to arbitrary code execution.