nmap mysql-info salt

HI Guys,
I'm curious to know more about the nmap script mysql-info, whne I run this against a vulnerable OS (Maetasploitable) running mysql 5.0.51 it return a value for the salt. I understand that the salt is used in the password hash generation. The information returned is:
nmap --script=mysql-info <IP>
                - protocol 10
                - version 5.0.51a
                - Status Autcommit
                - Salt 'jqzl$_3"L:zztYAuMa!'

I couldn't figure out how or why the script returns the salt and also the hardcoded salt in the script differs from the returned output. <elem key="Salt">bYyt\NQ/4V6IN+*3`imj</elem>. Could you help me understand how this value is being returned please.

Regards
Syed




Syed Shah | Snr Security Testing Analyst | Information Security & Compliance | Digital and Technology Division
Sainsbury's Supermarkets Ltd | 33 Holborn | EC1N 2HT
[email protected]<mailto:[email protected]> | 07905325768 | 020769 53284

Sainsbury's Information Security - "Using Security as a Differentiator to Enable Business Growth"

[cid:[email protected]]

You can live well for less than you thought at
Sainsbury's based on price perception data


________________________________

This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager ([email protected]) and delete it from your system.

Sainsbury's Supermarkets Ltd (3261722 England)
Registered Offices: 33 Holborn, London, EC1N 2HT

Sainsbury's Argos is a trading name of both:
1) Argos Limited, Registered office: 489-499 Avebury Boulevard, Milton Keynes, United Kingdom, MK9 2NW, registered number: 01081551 (England and Wales); and
2) Sainsbury's Supermarkets Limited, Registered office: 33 Holborn, London, EC1N 2HT, registered number: 03261722 (England and Wales).

All companies listed above are subsidiaries of J Sainsbury plc (185647).

________________________________

_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/