Later in the page (in the "Hardening" section), they mention that they've switched the forums to use Ubuntu SSO for authentication, instead of needing to store forum passwords.
And I wonder what hashing approach Ubuntu SSO uses?
I think this is an unreasonable expectation if the upstream vBulletin code doesn't support it.