Vulnerable Systems:
* BZFlag version 2.0.4 and prior
The callsigns used by the clients are not checked or re-delimited by the server so is possible for a client to pass a callsign with no NULL bytes at its end causing problems (crash) to the server during the handling of this string.
On both Linux and Windows for x86 (using the precompiled packages) the server crash reached without problems but is possible that in some configurations the crash could happen after many tries or also never, depending by how the memory is handled on that platform.
The bug can be exploited also versus password protected servers without knowing the right keyword.
