Key derived from user password with fast algorythm is used as a key for block cypher, making it easy to bruteforce user password.
vulners.com/securityvulns/securityvulns:doc:10258