The server component in Marathon Aleph One before 0.17.1 and 2006-12-17 allows remote attackers to cause a denial of service (application crash) via unspecified vectors related to "gathering net games."
http://www.vupen.com/english/advisories/2006/5064
http://www.securityfocus.com/bid/21655
http://sourceforge.net/project/shownotes.php?release_id=471971
http://sourceforge.net/project/shownotes.php?release_id=471964