If a tool like oscanner guesses the password, this issue should be generated.
If the hash is cracked, then we don't necessarily want to generate this issue.
Original issue reported on code.google.com by pentestm...@googlemail.com on 29 Oct 2010 at 9:13