MySQL privelege escalation

By spoofing datadir/my.cnf with SELECT INTO it's possible to launch MySQL with any account, including root...

PT-2002-1978 · Oracle · Mysql Server

Name of the Vulnerable Software and Affected Versions: MySQL versions 3.23.x through 3.23.49 MySQL versions 4.0 beta through 4.0.1 Description: A buffer overflow issue in the MySQL daemon allows local users to execute arbitrary code via a long datadir parameter in the my.ini initialization file...