SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal (in conjunction with CVE-2019-14511) because the mysql client can be used for CALL SNIPPETS and load_file operations on a full pathname (e.g., a file in the /etc directory). NOTE: this is unrelated to CMUSphinx.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal (in conjunction with     CVE-2019-14511) because the mysql client can be used for CALL SNIPPETS and load_file operations on a full     pathname (e.g., a file in the /etc directory). NOTE: this is unrelated to CMUSphinx. (CVE-2020-29050)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:0054-1 advisory.

  - SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal (in conjunction with     CVE-2019-14511) because the mysql client can be used for CALL SNIPPETS and load_file operations on a full     pathname (e.g., a file in the /etc directory). NOTE: this is unrelated to CMUSphinx. (CVE-2020-29050)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-2882 advisory.

  - SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal (in conjunction with     CVE-2019-14511) because the mysql client can be used for CALL SNIPPETS and load_file operations on a full     pathname (e.g., a file in the /etc directory). NOTE: this is unrelated to CMUSphinx. (CVE-2020-29050)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dsa-5036 advisory.

  - SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal (in conjunction with     CVE-2019-14511) because the mysql client can be used for CALL SNIPPETS and load_file operations on a full     pathname (e.g., a file in the /etc directory). NOTE: this is unrelated to CMUSphinx. (CVE-2020-29050)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
255732	Linux Distros Unpatched Vulnerability : CVE-2020-29050	Nessus	Misc.	high
158508	openSUSE 15 Security Update : sphinx (openSUSE-SU-2022:0054-1)	Nessus	SuSE Local Security Checks	high
156770	Debian DLA-2882-1 : sphinxsearch - LTS security update	Nessus	Debian Local Security Checks	high
156547	Debian DSA-5036-1 : sphinxsearch - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2020-29050

high

Tenable Plugins

high

high

high

high