MySQL is prone to a security-bypass vulnerability and to to a local privilege-escalation vulnerability. An attacker can exploit the security-bypass issue to bypass certain security restrictions and obtain sensitive information that may lead to further attacks. Local attackers can exploit the local privilege-escalation issue to gain elevated privileges on the affected computer. Versions prior to MySQL 5.1.41 are vulnerable.

Updates are available. Please see the references for details.

• http://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html
• http://www.mysql.com/
• http://www.securityfocus.com/bid/37075
• http://www.securityfocus.com/bid/37076

---

Updated on 2015-03-25