Secunia

Some vulnerabilities have been reported in MySQL, which can be exploited by by malicious users to gain escalated privileges, and by malicious people to cause a DoS (Denial of Service) and to compromise a vulnerable system.

1) Some vulnerabilities are caused due to the use of vulnerable yaSSL code.

For more information:
SA28324

Successful exploitation requires that SSL access through yaSSL is enabled.

The vulnerabilities are reported in version 5.0.51. Other versions after 5.0.9 may also be affected.

2) Two vulnerabilities can be exploited by malicious users to gain escalated privileges or to cause a DoS (Denial of Service).

For more information see vulnerabilities #1 and #2 in:
SA28063

The vulnerabilities are reported in versions prior to 5.0.51a.

Solution
Update to MySQL Community Server 5.0.51.a or later.
Further details available in Customer Area

Provided and/or discovered by
Originally reported by Luigi Auriemma in yaSSL.

Changelog
Further details available in Customer Area

Original Advisory
MySQL:
http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-51a.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area