So my company is working with a vendor to provide some software. They vendor tech gave me an FTP site to goto to download some patches. He told me I would be challenged for user/password. I didn't. Hmmm. Out of curiosity, I went up to the root and bingo... full access to every sub-folder. All their clients. Nice. Oh wait, what's this? I can create folders and files? Coool.

Stupid vendors. Microsoft FTP is for kids.