Skulltag 0.96f and prior suffers from a format string vulnerability exploitable when a client passes a wrong version string.