The MySQL database versions <= 3.23.53a and <= 4.0.5a contains local and remote vulnerabilities allowing remote attackers to bypass the MySQL password check and execute arbitrary code with the privileges of the user running mysqld. An arbitrary size heap overflow within the mysql client library and another vulnerability which allows ' ' to be written to any memory address allow DOS attacks against or arbitrary code execution within anything linked against libmysqlclient. You can download this advisory from the following link: https://packetstormsecurity.com/files/download/30592/mysql.4.0.5a.txt Source: https://packetstormsecurity.com/files/30592/mysql.4.0.5a.txt.html