CVE-2005-4860

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-12-31 · updated 2026-06-16
Weakness: CWE-327

Description

Spectrum Cash Receipting System before 6.504 uses weak cryptography (static substitution) in the PASSFILE password file, which makes it easier for local users to gain privileges by decrypting a password.

Affected products

Spectrumcu Cash Receipting System: before 6.504 — fixed in 6.504

How to fix

Upgrade to a fixed version: Spectrumcu Cash Receipting System 6.504. Check the vendor advisory for mitigations.

References

http://marc.info/?l=bugtraq&m=111229613907550&w=2
http://secunia.com/advisories/13985
http://www.portcullis.co.uk/uplds/advisories/Portcullis%20Security%20Advisory%2005-002%20Spectrum%20Cash%20Receipting%20System%20Weak%20Password%20Protection%20Vulnerability.txt
http://marc.info/?l=bugtraq&m=111229613907550&w=2
http://secunia.com/advisories/13985
http://www.portcullis.co.uk/uplds/advisories/Portcullis%20Security%20Advisory%2005-002%20Spectrum%20Cash%20Receipting%20System%20Weak%20Password%20Protection%20Vulnerability.txt

Get alerted when CVE-2005-4860 or the next vulnerability affects your stack