Mysql 5.0.12 Exploit -
The primary exploit associated with MySQL 5.0.12 often centers on the way the server handled authentication and privilege escalation. At the time, researchers discovered that if an attacker had sufficient privileges to execute CREATE FUNCTION or manipulate the mysql.func system table, they could cause the server to load a malicious shared library.
The CVE for the UDF arbitrary library loading wasn’t officially assigned until years later, but in the underground, it was simply called "The Silent Stack"—because the only sound you heard was your data walking out the door. mysql 5.0.12 exploit
The exploit is harmless if the MySQL daemon runs as a dedicated, low-privileged user: The primary exploit associated with MySQL 5
If the client ( mysql -h malicious_host -u root ) crashes, it is vulnerable. but in the underground