If an authenticated user has INSERT and DELETE privileges on an mysql administrative database, it is possible, by using the CREATE FUNCTION command, to take advantage of functions from libc in order to gain mysql user privileges. Version 4.1.10 and versions below and equal to 4.0.23 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/36598/mysqlCreatelibc.txt
Source: https://packetstormsecurity.com/files/36598/mysqlCreatelibc.txt.html