Dmitry Lenev

**Name of the Vulnerable Software and Affected Versions** MySQL versions prior to 5.0.25 MySQL versions prior to 5.1.12 **Description** The issue allows remote authenticated users to gain privileges through a routine that has been made available using GRANT EXECUTE, due to the evaluation of arguments of suid routines in the security context of the routine's definer instead of the routine's caller. **Recommendations** For MySQL versions prior to 5.0.25, update to version 5.0.25 or later. For MySQL versions prior to 5.1.12, update to version 5.1.12 or later.