Description
The kamcmd administrative utility and default configuration in kamailio before 4.3.0 use /tmp/kamailio_ctl.
References (5)
Core 5
Core References
Issue Tracking, Mailing List, Patch, Third Party Advisory mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2015/02/12/7
Issue Tracking, Third Party Advisory x_refsource_confirm
https://github.com/kamailio/kamailio/issues/48
Release Notes, Third Party Advisory x_refsource_confirm
https://github.com/kamailio/kamailio/blob/4.3.0/ChangeLog#L2038
Issue Tracking, Patch, Third Party Advisory x_refsource_confirm
https://github.com/kamailio/kamailio/commit/06177b12936146d48378cc5f6c6e1b157ebd519b
Issue Tracking, Mailing List, Third Party Advisory x_refsource_confirm
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775681
Scores
CVSS v3
7.8
EPSS
0.0008
EPSS Percentile
24.5%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-264
Status
published
Products (1)
kamailio/kamailio
< 4.2.8
Published
Sep 07, 2017
Tracked Since
Feb 18, 2026