CVE-2013-6404: Quassel core (server daemon) in Quassel IRC before 0.9.2 does not properly verify the user ID when accessin...

Security readout for executives and security teams

Quassel IRC core before 0.9.2 could let a logged-in user on a shared core read other users' chat backlogs. This is a confidentiality issue, not a known unauthenticated takeover. Business impact is highest where Quassel stores sensitive internal discussions or serves multiple users. Exposure is likely limited to organizations running Quassel IRC core before 0.9.2, especially shared multi-user cores using stored backlogs. The source bundle does not identify broader affected products, CPEs, or exact distribution package versions beyond vendor advisories. Prioritize patching where Quassel is multi-user or stores sensitive conversations. Single-user or non-sensitive deployments are lower urgency, but still should be updated because the flaw directly breaks user data separation. Mitigation focus: Upgrade Quassel core to 0.9.2 or a vendor-fixed package.; Check relevant Linux distribution advisories for backported fixes.; Restrict shared core access to trusted users until patched..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.