CVE-2001-1528

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2001-12-31 · updated 2026-06-16
Weakness: CWE-203

Description

AmTote International homebet program returns different error messages when invalid account numbers and PIN codes are provided, which allows remote attackers to determine the existence of valid account numbers via a brute force attack.

Affected products

Amtote Homebet: all versions

References

http://archives.neohapsis.com/archives/bugtraq/2001-09/0235.html
http://www.iss.net/security_center/static/7185.php
http://www.securityfocus.com/bid/3371
http://archives.neohapsis.com/archives/bugtraq/2001-09/0235.html
http://www.iss.net/security_center/static/7185.php
http://www.securityfocus.com/bid/3371

Get alerted when CVE-2001-1528 or the next vulnerability affects your stack