CVE-2005-4860

CVE-2005-4860 describes a weak cryptography vulnerability in Spectrum Cash Receipting System versions prior to 6.504, where a static substitution cipher is used to protect passwords in the PASSFILE. This flaw allows local attackers to easily decrypt passwords and potentially gain elevated privileges. With a CVSS score of 7.8 (High), the vulnerability has a low attack complexity and requires local access, but successful exploitation can lead to high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this older vulnerability.