CVE-2001-1528
AmTote International homebet program returns different error messages when invalid account...
AmTote International homebet program returns different error messages when invalid account numbers and PIN codes are provided, which allows remote attackers to determine the existence of valid account numbers via a brute force attack.
Exploit likelihood
What each source reports
NVD Score used
AmTote International homebet program returns different error messages when invalid account numbers and PIN codes are provided, which allows remote attackers to determine the existence of valid account numbers via a brute force attack.
- Record
CVE-2001-1528- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-203
- Updated
- 2026-11-02
CVE List No score
AmTote International homebet program returns different error messages when invalid account numbers and PIN codes are provided, which allows remote attackers to determine the existence of valid account numbers via a brute force attack.
- Record
CVE-2001-1528- Updated
- 2026-11-02
EUVDEUVD-2001-1505 No score
AmTote International homebet program returns different error messages when invalid account numbers and PIN codes are provided, which allows remote attackers to determine the existence of valid account numbers via a brute force attack.
- Record
EUVD-2001-1505- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m9j4-rc9x-qfm5 No score
AmTote International homebet program returns different error messages when invalid account...
AmTote International homebet program returns different error messages when invalid account numbers and PIN codes are provided, which allows remote attackers to determine the existence of valid account numbers via a brute force attack.
- Record
GHSA-m9j4-rc9x-qfm5- Weakness
- CWE-203
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Amtote Homebet - Account Information Brute Force | 2001-09-28 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2001-1528 is a medium vulnerability (CVSS 5.0) in Amtote Homebet, published December 31, 2001. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 7.91%, the 94th percentile. No source names a fixed version.