Unscored CVE-2005-4860 EUVD-2005-4851GHSA-7j3h-rx7g-x4p6

Spectrum Cash Receipting System before 6.504 uses weak cryptography (static substitution) in the PASSFILE password file, which makes it eas…

Published Aug 8, 2007 · Updated Sep 16, 2024 · Assigned by mitre

Description

Spectrum Cash Receipting System before 6.504 uses weak cryptography (static substitution) in the PASSFILE password file, which makes it easier for local users to gain privileges by decrypting a password.

References

http://www.portcullis.co.uk/uplds/advisories/Portcullis%20Security%20Advisory%2005-002%20Spectrum%20Cash%20Receipting%20System%20Weak%20Password%20Protection%20Vulnerability.txt
13985 third-party-advisory
20050331 Vendor Response to Portculis Advisory 05-002: Spectrum Cash mailing-list