Debian Security Advisory DSA 1662-1 (mysql-dfsg-5.0)

Summary
The remote host is missing an update to mysql-dfsg-5.0 announced via advisory DSA 1662-1.
Solution
https://secure1.securityspace.com/smysecure/catid.html?in=DSA%201662-1
Insight
A symlink traversal vulnerability was discovered in MySQL, a relational database server. The weakness could permit an attacker having both CREATE TABLE access to a database and the ability to execute shell commands on the database server to bypass MySQL access controls, enabling them to write to tables in databases to which they would not ordinarily have access. The Common Vulnerabilities and Exposures project identifies this vulnerability as CVE-2008-4098. Note that a closely aligned issue, identified as CVE-2008-4097, was prevented by the update announced in DSA-1608-1. This new update supercedes that fix and mitigates both potential attack vectors. For the stable distribution (etch), this problem has been fixed in version 5.0.32-7etch8. We recommend that you upgrade your mysql packages.