How is QID 27002 - Writeable Root Directory on Anonymous FTP Server detected?
When running the detection for this QID, the QualysGuard service will login and try to write under the root directory. If the service can write, we flag it as confirmed. If we cannot login and write under the root directory we do not post.
Qualys Support KnowledgeBase