Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2008-5657 Details

CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC messages as other users via a crafted CTCP message.

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506550	CVE
http://quassel-irc.org/node/89	CVE	PatchVendor Advisory
http://secunia.com/advisories/32470	CVE
http://secunia.com/advisories/32692	CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/46195	CVE
https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00354.html	CVE
http://wouter.coekaerts.be/site/security/quassel-ctcp	CVE
http://www.securityfocus.com/archive/1/497882/30/0/threaded	CVE
http://www.securityfocus.com/archive/1/497884	CVE
http://www.securityfocus.com/bid/31973	CVE
http://www.vupen.com/english/advisories/2008/3164	CVE
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506550	[email protected]
http://quassel-irc.org/node/89	[email protected]	PatchVendor Advisory
http://secunia.com/advisories/32470	[email protected]
http://secunia.com/advisories/32692	[email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/46195	[email protected]
https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00354.html	[email protected]
http://wouter.coekaerts.be/site/security/quassel-ctcp	[email protected]
http://www.securityfocus.com/archive/1/497882/30/0/threaded	[email protected]
http://www.securityfocus.com/archive/1/497884	[email protected]
http://www.securityfocus.com/bid/31973	[email protected]
http://www.vupen.com/english/advisories/2008/3164	[email protected]

CWE-ID	CWE Name	Source
CWE-20	Improper Input Validation	[email protected]

Product	Versions
quassel quassel core	<= 0.3.0.2 0.1.0 0.2.0 alpha1 0.2.0 alpha2 0.2.0 alpha3
CPE cpe:2.3:a:quassel:quassel_core:::::::: cpe:2.3:a:quassel:quassel_core:0.1.0:::::::* cpe:2.3:a:quassel:quassel_core:0.2.0:alpha1:::::: cpe:2.3:a:quassel:quassel_core:0.2.0:alpha2:::::: cpe:2.3:a:quassel:quassel_core:0.2.0:alpha3:::::: cpe:2.3:a:quassel:quassel_core:0.2.0:alpha4:::::: cpe:2.3:a:quassel:quassel_core:0.2.0:alpha5:::::: cpe:2.3:a:quassel:quassel_core:0.2.0:beta1:::::: cpe:2.3:a:quassel:quassel_core:0.2.0:pre:::::: cpe:2.3:a:quassel:quassel_core:0.2.0:rc1:::::: cpe:2.3:a:quassel:quassel_core:0.3.0:::::::* cpe:2.3:a:quassel:quassel_core:0.3.0:pre:::::: cpe:2.3:a:quassel:quassel_core:0.3.0.1:::::::* Remediation No remediation found in references.

Product

Versions

quassel quassel core

<= 0.3.0.2

0.1.0

0.2.0 alpha1

0.2.0 alpha2

0.2.0 alpha3

6 change records found show changes

QUICK INFO