CVE-2003-0650 Directory traversal vulnerability in GSAPAK.EXE for GameSpy Arcade, possibly versions before 1.3e, allows remote attackers to overwrite arbitrary files and execute arbitrary code via .. (dot dot) sequ...
HighCVSS 7.5
EPSS 3.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in GSAPAK.EXE for GameSpy Arcade, possibly versions before 1.3e, allows remote attackers to overwrite arbitrary files and execute arbitrary code via .. (dot dot) sequences in filenames in a .APK (Zip) file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gamespy arcade | <= 1.3e | No fix listed |
References
- 20030730 GameSpy Arcade Arbitrary File Writing Vulnerability mailing-list
- 20030730 GameSpy Arcade Arbitrary File Writing Vulnerability mailing-list
- www.gamespyarcade.com
- 8309 exploit patch vdb-entry vendor-advisory