NetSight
IP …
high7.5

CVE-2008-5657

CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC messages as other users via a crafted CTCP message.

Impact

CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC messages as other users via a crafted CTCP message.

Affected products

VendorProductAffected versions
QuasselQuassel Core
through 0.3.0.2
Versions 0.1.0, 0.2.0, 0.3.0, 0.3.0.1

Weakness classification

CWE-20

References