Description
Directory traversal vulnerability in GSAPAK.EXE for GameSpy Arcade, possibly versions before 1.3e, allows remote attackers to overwrite arbitrary files and execute arbitrary code via .. (dot dot) sequences in filenames in a .APK (Zip) file.
Metrics
CVSS 2.0 7.5/10
AV:N/AC:L/Au:N/C:P/I:P/A:PAffected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0064.html
- http://marc.info/?l=bugtraq&m=105958779017085&w=2
- http://www.gamespyarcade.com/features/versions.shtml
- http://www.securityfocus.com/bid/8309Exploit, Patch, Vendor Advisory
- http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0064.html
- http://marc.info/?l=bugtraq&m=105958779017085&w=2
- http://www.gamespyarcade.com/features/versions.shtml
- http://www.securityfocus.com/bid/8309Exploit, Patch, Vendor Advisory
Timeline
- Published
- Aug 27, 2003
- Last modified
- Jun 16, 2026
- NVD status
- Modified