The FTP service in Watchguard Soho Firewall 5.0.35a allows remote attackers to gain privileges with a correct password but an incorrect user name.Referenceshttp://archives.neohapsis.com/archives/vulnwatch/2002-q2/0139.htmlhttp://www.iss.net/security_center/static/9511.php