Saintbot PCI/vuln scanner (via Controlscan) is flagging FTP port 21 vulnerable to Sweet32, based on the existence of a 3DES "grade C" cipher.
The fix is easy -- update the available ciphers to be more secure. However Cpanel v62 has a current "issue" where their version of PureFTP does not obey ciphers set forth in pure-ftpd.conf.
This causes a PCI fail until we switch to ProFTP. We don't really want to do that....at all.
Question is, can/does Sweet32 even work with FTP or similar style "authenticated" connections? I want to attest their finding, unless it's actually possible to pull this attack off on non-web tunnels.