Description
MySQL Server 5.1.x before 5.1.23 and 6.0.x before 6.0.4 does not check the rights of the entity executing BINLOG, which allows remote authorized users to execute arbitrary BINLOG statements.
References
- 43179 vdb-entry
- ADV-2008-0560 vdb-entry
- http://bugs.mysql.com/31611
- http://dev.mysql.com/doc/refman/5.1/en/news-5-1-23.html
- 1019083 vdb-entry