engine/server.cpp in Sauerbraten 2006_02_28, as derived from the Cube engine, allows remote attackers to cause a denial of service (segmentation fault) via a client that does not completely join the game and times out, which results in a null pointer dereference.
https://exchange.xforce.ibmcloud.com/vulnerabilities/25087
http://www.vupen.com/english/advisories/2006/0848
http://www.securityfocus.com/bid/16986
http://www.securityfocus.com/archive/1/426865/100/0/threaded