Buffer overflow in bbs100 before 3.2 allows remote attackers to cause a denial of service (crash) by attempting to login as the Guest user when another Guest user is already logged in, possibly related to the state_login_prompt function in state_login.c.
https://exchange.xforce.ibmcloud.com/vulnerabilities/35244
http://www.securityfocus.com/bid/24747
http://www.ka.sara.nl/home/walter//bbs100/ChangeLog.txt