Root password is stored as only 8 characters … wonder how long it would take to bruteforce?

Fix it – here:

http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1024500