CVE-2013-1431

The Wocky module in Telepathy Gabble before 0.16.6 and 0.17.x before 0.17.4, when connecting to a "legacy Jabber server," does not properly enforce the WockyConnector:tls-required flag, which allows remote attackers to bypass TLS verification and perform a man-in-the-middle attacks.

• CWE-20

• http://seclists.org/oss-sec/2013/q2/438Mailing List, Patch
• http://secunia.com/advisories/53779Permissions Required, Third Party Advisory
• http://www.debian.org/security/2013/dsa-2702Third Party Advisory
• http://www.ubuntu.com/usn/USN-1873-1Third Party Advisory
• https://bugs.freedesktop.org/show_bug.cgi?id=65036Patch
• http://seclists.org/oss-sec/2013/q2/438Mailing List, Patch
• http://secunia.com/advisories/53779Permissions Required, Third Party Advisory
• http://www.debian.org/security/2013/dsa-2702Third Party Advisory
• http://www.ubuntu.com/usn/USN-1873-1Third Party Advisory
• https://bugs.freedesktop.org/show_bug.cgi?id=65036Patch

Published

Sep 23, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-1425ldap-git-backup before 1.0.4 exposes password hashes due to …5.5
• CVE-2013-1426Cross-site Scripting (XSS) in Mahara before 1.5.9 and 1.6.x …6.1
• CVE-2013-1427The configuration file for the FastCGI PHP support for light…
• CVE-2013-1428Stack-based buffer overflow in the receive_tcppacket functio…
• CVE-2013-1429Lintian before 2.5.12 allows remote attackers to gather info…6.3
• CVE-2013-1430An issue was discovered in xrdp before 0.9.1. When successfu…
• CVE-2013-1432Xen 4.1.x and 4.2.x, when the XSA-45 patch is in place, does…
• CVE-2013-1433Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2013-1434Multiple SQL injection vulnerabilities in (1) api_poller.php…
• CVE-2013-1435(1) snmp.php and (2) rrd.php in Cacti before 0.8.8b allows r…
• CVE-2013-1436The XMonad.Hooks.DynamicLog module in xmonad-contrib before …
• CVE-2013-1437Eval injection vulnerability in the Module-Metadata module b…9.8