CVE-2008-5657

Опубликовано: 17 дек. 2008

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC messages as other users via a crafted CTCP message.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:quassel:quassel_core:*:*:*:*:*:*:*:*

Версия до 0.3.0.2 (включая)

cpe:2.3:a:quassel:quassel_core:0.1.0:*:*:*:*:*:*:*

cpe:2.3:a:quassel:quassel_core:0.2.0:alpha1:*:*:*:*:*:*

cpe:2.3:a:quassel:quassel_core:0.2.0:alpha2:*:*:*:*:*:*

cpe:2.3:a:quassel:quassel_core:0.2.0:alpha3:*:*:*:*:*:*

cpe:2.3:a:quassel:quassel_core:0.2.0:alpha4:*:*:*:*:*:*

cpe:2.3:a:quassel:quassel_core:0.2.0:alpha5:*:*:*:*:*:*

cpe:2.3:a:quassel:quassel_core:0.2.0:beta1:*:*:*:*:*:*

cpe:2.3:a:quassel:quassel_core:0.2.0:pre:*:*:*:*:*:*

cpe:2.3:a:quassel:quassel_core:0.2.0:rc1:*:*:*:*:*:*

cpe:2.3:a:quassel:quassel_core:0.3.0:*:*:*:*:*:*:*

cpe:2.3:a:quassel:quassel_core:0.3.0:pre:*:*:*:*:*:*

cpe:2.3:a:quassel:quassel_core:0.3.0.1:*:*:*:*:*:*:*

EPSS

Процентиль: 80%

0.01449

Низкий

7.5 High

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2008-5657

ubuntu

около 17 лет назад

CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC messages as other users via a crafted CTCP message.

CVE-2008-5657

debian

около 17 лет назад

CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows rem ...

GHSA-7w3h-h898-5w7m

github

больше 3 лет назад

CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC messages as other users via a crafted CTCP message.

EPSS

Процентиль: 80%

0.01449

Низкий

7.5 High

CVSS2

Дефекты

CWE-20