Mandriva Linux Security Advisory MDKSA-2006-149 – MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user’s privileges are revoked for the original table, which might violate intended security policy. MySQL 4.1 before 4.1.21, 5.0 before 5.0.25, and 5.1 before 5.1.12, when run on case-sensitive filesystems, allows remote authenticated users to create or access a database when the database name differs only in case from a database for which they have permissions.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/49470/MDKSA-2006-149.txt
Source: https://packetstormsecurity.com/files/49470/Mandriva-Linux-Security-Advisory-2006.149.html