CVE-2015-1590
HighSummary
The kamcmd administrative utility and default configuration in kamailio before version 4.3.0 use the /tmp/kamailio_ctl directory.
Risk Assessment
The use of the /tmp directory may lead to unauthorized access or data manipulation, posing a security risk to the system.
Recommendation
It is recommended to upgrade to kamailio version 4.3.0 or later and to change the configuration to avoid using the /tmp directory.
Other vulnerabilities in kamailio
See all- CVE-2015-1591High
Versions of kamailio before 4.2.0-2 have a vulnerability that allows local users to gain elevated privileges.
- CVE-2013-7426Critical
CVE-2013-7426 identifies an insecure handling of temporary files in kamailio 4.0.1, specifically concerning the /tmp/kamailio_fifo file. This may lead to unauthorized access to data.
- CVE-2026-39864Medium
Kamailio before versions 6.0.5 and 5.8.7 contains an out-of-bounds read vulnerability in the auth module. A specially crafted SIP packet can cause a process crash (DoS) after successful user authentication without a database backend.
- CVE-2026-39863High
In Kamailio (formerly OpenSER and SER) prior to versions 6.1.1, 6.0.6, and 5.8.8, an out-of-bounds access vulnerability exists in the core. A remote attacker can send a specially crafted TCP packet, causing a process crash (denial of service). This affects Kamailio instances with TCP or TLS listeners.
Original NVD description (English source)
The kamcmd administrative utility and default configuration in kamailio before 4.3.0 use /tmp/kamailio_ctl.