CVE-2001-1528
AmTote International homebet program returns different error messages when invalid account...
CVE-2001-1528 is a medium vulnerability (CVSS 5.0) in Amtote Homebet, published December 31, 2001. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 7.91%, the 94th percentile. No source names a fixed version.
- Severity
- 5.0 MediumCVSS 2.0, NVD
- Exploit chance
- 7.91%EPSS, 94th percentile
- Exploitation
- None known1 public exploit
- Fixed in
- No fix listedNo source names one
Description
AmTote International homebet program returns different error messages when invalid account numbers and PIN codes are provided, which allows remote attackers to determine the existence of valid account numbers via a brute force attack.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Amtote Homebet - Account Information Brute Force | 2001-09-28 |
What each source reports
NVD Score used
AmTote International homebet program returns different error messages when invalid account numbers and PIN codes are provided, which allows remote attackers to determine the existence of valid account numbers via a brute force attack.
- Record
CVE-2001-1528- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-203
- Updated
- 2026-11-02
CVE ListNo score
AmTote International homebet program returns different error messages when invalid account numbers and PIN codes are provided, which allows remote attackers to determine the existence of valid account numbers via a brute force attack.
- Record
CVE-2001-1528- Updated
- 2026-11-02
EUVDEUVD-2001-1505No score
AmTote International homebet program returns different error messages when invalid account numbers and PIN codes are provided, which allows remote attackers to determine the existence of valid account numbers via a brute force attack.
- Record
EUVD-2001-1505- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m9j4-rc9x-qfm5No score
AmTote International homebet program returns different error messages when invalid account...
AmTote International homebet program returns different error messages when invalid account numbers and PIN codes are provided, which allows remote attackers to determine the existence of valid account numbers via a brute force attack.
- Record
GHSA-m9j4-rc9x-qfm5- Weakness
- CWE-203
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.