CVE-2015-1591

The kamailio build in kamailio before 4.2.0-2 process allows local users to gain privileges.

• CWE-264

• http://cve.killedkenny.io/cve/CVE-2015-1591Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/02/12/7Mailing List, Third Party Advisory
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775681Mailing List, Third Party Advisory
• https://bugs.debian.org/cgi-bin/bugreport.cgi?msg=17%3Bfilename=0001-fix-fifo-and-ctl-defaults-pointing-to-unsecure-tmp-d.patch%3Batt=1%3Bbug=775681
• https://github.com/kamailio/kamailio/issues/48Third Party Advisory
• https://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-1591.htmlThird Party Advisory
• http://cve.killedkenny.io/cve/CVE-2015-1591Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/02/12/7Mailing List, Third Party Advisory
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775681Mailing List, Third Party Advisory
• https://bugs.debian.org/cgi-bin/bugreport.cgi?msg=17%3Bfilename=0001-fix-fifo-and-ctl-defaults-pointing-to-unsecure-tmp-d.patch%3Batt=1%3Bbug=775681
• https://github.com/kamailio/kamailio/issues/48Third Party Advisory
• https://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-1591.htmlThird Party Advisory

Published

Jun 27, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-1583Multiple cross-site request forgery (CSRF) vulnerabilities i…8.8
• CVE-2015-1585Fat Free CRM before 0.13.6 allows remote attackers to conduc…
• CVE-2015-1587Unrestricted file upload vulnerability in file_to_index.php …
• CVE-2015-1588Multiple cross-site scripting (XSS) vulnerabilities in Open-…
• CVE-2015-1589Directory traversal vulnerability in arCHMage 0.2.4 allows r…
• CVE-2015-1590The kamcmd administrative utility and default configuration …
• CVE-2015-1592Movable Type Pro, Open Source, and Advanced before 5.2.12 an…
• CVE-2015-1593The stack randomization feature in the Linux kernel before 3…
• CVE-2015-1594Untrusted search path vulnerability in Siemens SIMATIC ProSa…
• CVE-2015-1595The Siemens SPCanywhere application for Android and iOS does…
• CVE-2015-1596The Siemens SPCanywhere application for Android and iOS does…
• CVE-2015-1597The Siemens SPCanywhere application for Android does not use…