Password is DES encoded with random key generated by server and moved over the wire.
vulners.com/securityvulns/securityvulns:doc:3173