Exposed Sphinx Servers Are No Challenge for Hackers

guest · Aug 20, 2019

Exposed Sphinx Servers Are No Challenge for Hackers
August 20, 2019
https://www.bleepingcomputer.com/news/security/exposed-sphinx-servers-are-no-challenge-for-hackers/

Attackers can take advantage of Sphinx web servers exposed on the internet to access, alter, or remove data in the database, warns CERT-Bund, Germany's computer emergency response team.

A popular open-source text search server, Sphinx offers impressive performance for indexing and searching data in databases or just in files. It is cross-platform, available for Linux, Windows, macOS, Solaris, FreeBSD, and a few other operating systems.

The organization highlights that Sphinx lacks any authentication mechanisms. Exposing it on the web gives an attacker the possibility "to read, modify or delete any data stored in the Sphinx database."
By default, the server listens on ports 9306/TCP and 9312/TCP on all network interfaces.Shodan returned a few thousand results when we searched for one of the ports, plenty of them for Sphinx servers.
Click to expand...

Log in or Sign up

Exposed Sphinx Servers Are No Challenge for Hackers

guest Guest

Log in or Sign up

Exposed Sphinx Servers Are No Challenge for Hackers

guest Guest

Useful Searches