Quassel IRC: connection hijacking

Quassel IRC http://quassel-irc.org/ is "a modern, cross-platform, distributed IRC client". A vulnerability in the CTCP handling allows an attacker to trick Quassel IRC into sending arbitrary commands to the IRC server. This can be used by an attacker for example to gain operator privileges on a...