[Zope] - ZServer

I noticed that when you FTP into ZServer it doesn't matter what userid or password you use, it allways says 'Login Successful'. Of course, your not authorized to see anything but your still logged in and there is still an open Medusa channel. Couldn't this be a hole into a possible Denial of Service attack? Michel