Format string vulnerability in Sierra Half-Life build 1573 and earlier allows a remote attacker to execute arbitrary code via the map command.
https://exchange.xforce.ibmcloud.com/vulnerabilities/6220
http://archives.neohapsis.com/archives/bugtraq/2001-03/0111.html