CVE-2005-4860 | BDVDB-2026-25673 Detail

Description#

Spectrum Cash Receipting System before 6.504 uses weak cryptography (static substitution) in the PASSFILE password file, which makes it easier for local users to gain privileges by decrypting a password.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.portcullis.co.uk/uplds/advisories/Portcullis%20Security%20Advisory%2005-002%20Spectrum%20Cash%20Receipting%20System%20Weak%20Password%20Protection%20Vulnerability.txt
http://secunia.com/advisories/13985
http://marc.info/?l=bugtraq&m=111229613907550&w=2

Exploit#

No public exploit known

History#

Version 12007-08-08Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.