A security issue has been reported in MySQL, which can be exploited by malicious users to cause a DoS (Denial of Service).

The security issue is caused due to an error when processing the "ALTER DATABASE" statement and can be exploited to corrupt the MySQL data directory using the "#mysql50#" prefix followed by e.g. a "." or "..".

Successful exploitation requires "ALTER" privileges on a database.

The security issue is reported in version prior to 5.1.48.

Solution
Update to version 5.1.48.

Provided and/or discovered by
Reported by Shane Bester in a MySQL bug report.

Original Advisory
http://dev.mysql.com/doc/refman/5.1/en/news-5-1-48.html
http://bugs.mysql.com/bug.php?id=53804

Deep Links
Links available to Secunia VIM customers