CVE-2006-4226
MySQL before 4.1.21, 5.0 before 5.0.25, and 5.1 before 5.1.12, when run on case-sensitive filesystems, allows remote authenticated users to create or access a database when the database name differs only in case from a database for which they have permissions.
Date published : 2006-08-18
http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html