Directory traversal vulnerability in MySQL before 3.23.36 allows local users to modify arbitrary files and gain privileges by creating a database whose name starts with .. (dot dot).
https://exchange.xforce.ibmcloud.com/vulnerabilities/6617
http://www.securityfocus.com/bid/2522
http://archives.neohapsis.com/archives/bugtraq/2001-03/0396.html