CVE-2004-0627: MySQL

High severity, CVSS 10.0. EPSS: 69.6% chance of exploitation in the next 30 days.

The check_scramble_323 function in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to bypass authentication via a zero-length scrambled string.

Affected products

• MySQL MySQL: version 4.1.0 only

Published 2004-12-06. Last modified 2026-06-16.