Two security issues have been reported in MySQL, which can be exploited by malicious, local users and malicious users to manipulate certain data.

1) A security issue is caused due to an error when checking privileges for "UNINSTALL PLUGIN". This can be exploited to uninstall a plugin without having the required "DELETE" privilege.

2) An error in the handling of DATA/INDEX files can be exploited to delete data files from other tables using MyISAM storage engine via symlink attacks.

Successful exploitation of this vulnerability requires user access to the file system and DROP privileges on a database table.

This is related to:
SA30134

Solution
Update to version 5.1.46.
Further details available to Secunia VIM customers

Provided and/or discovered by
1) Reported by the vendor.
2) Ingo Strüwing

Changelog
Further details available to Secunia VIM customers

Original Advisory
MySQL:
http://dev.mysql.com/doc/refman/5.1/en/news-5-1-46.html
http://lists.mysql.com/commits/103144
http://bazaar.launchpad.net/~mysql/mysql-server/mysql-5.1/revision/3396
http://bugs.mysql.com/bug.php?id=40980

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers