{"api_version":"1","generated_at":"2026-07-23T05:58:01+00:00","cve":"CVE-2003-0650","urls":{"html":"https://cve.report/CVE-2003-0650","api":"https://cve.report/api/cve/CVE-2003-0650.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2003-0650","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2003-0650"},"summary":{"title":"CVE-2003-0650","description":"Directory traversal vulnerability in GSAPAK.EXE for GameSpy Arcade, possibly versions before 1.3e, allows remote attackers to overwrite arbitrary files and execute arbitrary code via .. (dot dot) sequences in filenames in a .APK (Zip) file.","state":"PUBLISHED","assigner":"mitre","published_at":"2003-08-27 04:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.gamespyarcade.com/features/versions.shtml","name":"http://www.gamespyarcade.com/features/versions.shtml","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"GameSpy: PC Games, Reviews, News, Previews, Demos, Mods & Patches","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://marc.info/?l=bugtraq&m=105958779017085&w=2","name":"http://marc.info/?l=bugtraq&m=105958779017085&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"'GameSpy Arcade Arbitrary File Writing Vulnerability' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0064.html","name":"http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0064.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Neohapsis Archives - VulnWatch - #0064 - [VulnWatch] GameSpy Arcade Arbitrary File Writing Vulnerability","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/8309","name":"http://www.securityfocus.com/bid/8309","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"],"title":"Gamespy Arcade GSAPAK.EXE .APK Extraction File Corruption Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2003-0650","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2003-0650","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2003","cve_id":"650","vulnerable":"1","versionEndIncluding":"1.3e","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gamespy","cpe5":"arcade","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-08T01:58:11.201Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"8309","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/8309"},{"name":"20030730 GameSpy Arcade Arbitrary File Writing Vulnerability","tags":["mailing-list","x_refsource_VULNWATCH","x_transferred"],"url":"http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0064.html"},{"name":"20030730 GameSpy Arcade Arbitrary File Writing Vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=105958779017085&w=2"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.gamespyarcade.com/features/versions.shtml"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2003-07-30T00:00:00.000Z","descriptions":[{"lang":"en","value":"Directory traversal vulnerability in GSAPAK.EXE for GameSpy Arcade, possibly versions before 1.3e, allows remote attackers to overwrite arbitrary files and execute arbitrary code via .. (dot dot) sequences in filenames in a .APK (Zip) file."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2016-10-17T13:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"8309","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/8309"},{"name":"20030730 GameSpy Arcade Arbitrary File Writing Vulnerability","tags":["mailing-list","x_refsource_VULNWATCH"],"url":"http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0064.html"},{"name":"20030730 GameSpy Arcade Arbitrary File Writing Vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://marc.info/?l=bugtraq&m=105958779017085&w=2"},{"tags":["x_refsource_MISC"],"url":"http://www.gamespyarcade.com/features/versions.shtml"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2003-0650","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Directory traversal vulnerability in GSAPAK.EXE for GameSpy Arcade, possibly versions before 1.3e, allows remote attackers to overwrite arbitrary files and execute arbitrary code via .. (dot dot) sequences in filenames in a .APK (Zip) file."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"8309","refsource":"BID","url":"http://www.securityfocus.com/bid/8309"},{"name":"20030730 GameSpy Arcade Arbitrary File Writing Vulnerability","refsource":"VULNWATCH","url":"http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0064.html"},{"name":"20030730 GameSpy Arcade Arbitrary File Writing Vulnerability","refsource":"BUGTRAQ","url":"http://marc.info/?l=bugtraq&m=105958779017085&w=2"},{"name":"http://www.gamespyarcade.com/features/versions.shtml","refsource":"MISC","url":"http://www.gamespyarcade.com/features/versions.shtml"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2003-0650","datePublished":"2003-08-05T04:00:00.000Z","dateReserved":"2003-08-04T00:00:00.000Z","dateUpdated":"2024-08-08T01:58:11.201Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2003-08-27 04:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gamespy:arcade:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3e","matchCriteriaId":"77A968C7-60B2-4E0E-BF99-7DF8817EA299"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2003","CveId":"650","Ordinal":"1","Title":"CVE-2003-0650","CVE":"CVE-2003-0650","Year":"2003"},"notes":[{"CveYear":"2003","CveId":"650","Ordinal":"1","NoteData":"Directory traversal vulnerability in GSAPAK.EXE for GameSpy Arcade, possibly versions before 1.3e, allows remote attackers to overwrite arbitrary files and execute arbitrary code via .. (dot dot) sequences in filenames in a .APK (Zip) file.","Type":"Description","Title":"CVE-2003-0650"},{"CveYear":"2003","CveId":"650","Ordinal":"2","NoteData":"2003-08-05","Type":"Other","Title":"Published"},{"CveYear":"2003","CveId":"650","Ordinal":"3","NoteData":"2016-10-17","Type":"Other","Title":"Modified"}]}}}