Skulltag before 0.97d2-RC6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) by sending a "command 29" packet when the player is not in the game.

References

• https://nvd.nist.gov/vuln/detail/CVE-2008-3597
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44363
• http://aluigi.altervista.org/adv/skulltagod-adv.txt
• http://secunia.com/advisories/31427
• http://skulltag.com/forum/viewtopic.php?f=1&t=14716
• http://www.vupen.com/english/advisories/2008/2325