I didn't think it was possible either. But I may have had my config-inc.php set for 777. I had just converted from one forum integration to another and I know I had set the config integrattion file too 777.
I don't know if that would make a difference or not.
I have a strong password, so I doubt that this got figured out... but with the password in plain text in this file it is worrisome.