Format string vulnerability in Sierra Half-Life build 1573 and earlier allows a remote attacker to execute arbitrary code via the map command.
https://exchange.xforce.ibmcloud.com/vulnerabilities/6220
https://euvd.enisa.europa.eu/vulnerability/EUVD-2001-0358
http://archives.neohapsis.com/archives/bugtraq/2001-03/0111.html