Launchpad.net

CVE 2008-5657

CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC messages as other users via a crafted CTCP message.

See the CVE page on Mitre.org for more details.