CVE-2003-1331: Stack-based buffer overflow in the mysql_real_connect function in the MySql client library (libmysqlclient)...

Security readout for executives and security teams

This is an old local code-execution issue in the MySQL client library, not the MySQL server itself. A user on the same system could abuse an overly long socket name when a program calls mysql_real_connect. Business urgency depends on whether legacy software still links libmysqlclient 4.0.13 or earlier. Exposure is most plausible in legacy systems, embedded products, or internally maintained applications still using libmysqlclient 4.0.13 or earlier. The source bundle does not identify internet-facing exposure; it describes a local-user attack path through the client library. Treat this as a legacy-risk cleanup item unless affected libraries are found on shared or multi-user systems. It is not marked as known exploited, but unsupported database client components can create avoidable local privilege and code-execution risk. Mitigation focus: Inventory systems and applications linking libmysqlclient 4.0.13 or earlier.; Check MySQL or vendor guidance for fixed or supported replacement versions.; Retire unsupported MySQL client libraries where feasible..

Prepared

Jun 29, 2026, 05:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.