{"id":"CVE-2003-0650","aliases":["EUVD-2003-0644","GHSA-c7rx-2qc5-pwqv"],"status":"published","title":"Directory traversal vulnerability in GSAPAK.EXE for GameSpy Arcade, possibly versions before 1.3e...","description":"Directory traversal vulnerability in GSAPAK.EXE for GameSpy Arcade, possibly versions before 1.3e, allows remote attackers to overwrite arbitrary files and execute arbitrary code via .. (dot dot) sequences in filenames in a .APK (Zip) file.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.03662,"percentile":0.89705,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2003-08-05T04:00:00Z","modified":"2026-06-16T22:02:35Z","products":[{"vendor":"gamespy","product":"arcade"}],"references":[{"url":"http://www.securityfocus.com/bid/8309","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0064.html","tags":["mailing-list","x_refsource_VULNWATCH","x_transferred"]},{"url":"http://marc.info/?l=bugtraq\u0026m=105958779017085\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.gamespyarcade.com/features/versions.shtml","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2003-0650"},{"url":"https://github.com/advisories/GHSA-c7rx-2qc5-pwqv"}],"sources":{"cve":[{"id":"CVE-2003-0650","description":"Directory traversal vulnerability in GSAPAK.EXE for GameSpy Arcade, possibly versions before 1.3e, allows remote attackers to overwrite arbitrary files and execute arbitrary code via .. (dot dot) sequences in filenames in a .APK (Zip) file.","status":"published","published":"2003-08-05T04:00:00Z","modified":"2024-08-08T01:58:11.201Z","updated_at":"2026-11-02T14:20:16.411288Z"}],"euvd":[{"id":"EUVD-2003-0644","description":"Directory traversal vulnerability in GSAPAK.EXE for GameSpy Arcade, possibly versions before 1.3e, allows remote attackers to overwrite arbitrary files and execute arbitrary code via .. (dot dot) sequences in filenames in a .APK (Zip) file.","status":"published","published":"2003-08-05T04:00:00Z","modified":"2024-08-08T01:58:11Z","updated_at":"2026-11-03T01:15:06.435593Z"}],"ghsa":[{"id":"GHSA-c7rx-2qc5-pwqv","title":"Directory traversal vulnerability in GSAPAK.EXE for GameSpy Arcade, possibly versions before 1.3e...","description":"Directory traversal vulnerability in GSAPAK.EXE for GameSpy Arcade, possibly versions before 1.3e, allows remote attackers to overwrite arbitrary files and execute arbitrary code via .. (dot dot) sequences in filenames in a .APK (Zip) file.","status":"published","published":"2022-04-29T01:26:46Z","modified":"2023-01-30T05:01:26Z","updated_at":"2026-11-02T14:46:24.524248Z"}],"nvd":[{"id":"CVE-2003-0650","description":"Directory traversal vulnerability in GSAPAK.EXE for GameSpy Arcade, possibly versions before 1.3e, allows remote attackers to overwrite arbitrary files and execute arbitrary code via .. (dot dot) sequences in filenames in a .APK (Zip) file.","status":"published","published":"2003-08-27T04:00:00Z","modified":"2026-06-16T22:02:35.357Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:47.41445Z"}]}}