CVE-2008-5657
CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC...
CVE-2008-5657 is a high vulnerability (CVSS 7.5) in Quassel Core, published December 17, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.11%, the 82nd percentile. Fixed in quassel 0.2~rc1-1.1.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 2.11%EPSS, 82nd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0.2~rc1-1.1quassel +2 more
Description
CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC messages as other users via a crafted CTCP message.
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC messages as other users via a crafted CTCP message.
- Record
CVE-2008-5657- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE ListNo score
CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC messages as other users via a crafted CTCP message.
- Record
CVE-2008-5657- Updated
- 2026-11-02
EUVDEUVD-2008-5628No score
CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC messages as other users via a crafted CTCP message.
- Record
EUVD-2008-5628- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7w3h-h898-5w7mNo score
CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC...
CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC messages as other users via a crafted CTCP message.
- Record
GHSA-7w3h-h898-5w7m- Weakness
- CWE-20
- Updated
- 2026-11-02
OSVNo score
CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC messages as other users via a crafted CTCP message.
- Record
CVE-2008-5657- Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-5657No score
CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC messages as other users via a crafted CTCP message.
- Record
DEBIAN-CVE-2008-5657- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
secunia.com/advisories/32470
securityfocus.com/archive/1/497884
bugs.debian.org/cgi-bin/bugreport.cgi?bug=506550
exchange.xforce.ibmcloud.com/vulnerabilities/46195
vupen.com/english/advisories/2008/3164
Show 8 moreShow less
wouter.coekaerts.be/site/security/quassel-ctcp
quassel-irc.org/node/89
redhat.com/archives/fedora-package-announce/2008-November/msg00354.html
nvd.nist.gov/vuln/detail/CVE-2008-5657
github.com/advisories/GHSA-7w3h-h898-5w7m
security-tracker.debian.org/tracker/CVE-2008-5657