cvspass - obtaining the password

[Lee]

Hi,

I'm trying to assess our systems security, and I'm looking at CVS right 
now. I cam across an article, `Securing CVS on OpenBSD` 
[http://www.blacksheepnetworks.com/security/resources/running-a-secure-cvs.pdf] 
that the password in .cvspass can be obtained easily as the encryption 
algorithm is well-known and reverisble.

Can anyone direct me to more information / the algorithm? A Google 
search isn't helping.

Thanks.

 Lee