The FTP service in Watchguard Soho Firewall 5.0.35a allows remote malicious users to gain privileges with a correct password but an incorrect user name.
watchguard soho firewall 5.0.35a