Format string vulnerability in Lithium II mod 1.24 for Quake 2 allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via format string specifiers in the nickname.
https://exchange.xforce.ibmcloud.com/vulnerabilities/22013
http://www.securityfocus.com/bid/14664