Vulnerability record · CVE-2001-1528 · published 31 December 2001
CVE-2001-1528: Amtote homebet observable discrepancy vulnerability
Amtote · Homebet
AmTote International homebet program returns different error messages when invalid account numbers and PIN codes are provided, which allows remote attackers to determine the existence of valid account numbers via a brute force attack.
Description
AmTote International homebet program returns different error messages when invalid account numbers and PIN codes are provided, which allows remote attackers to determine the existence of valid account numbers via a brute force attack.
AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected products
1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
| Link | Tags |
|---|---|
| http://archives.neohapsis.com/archives/bugtraq/2001-09/0235.html | Broken LinkVendor Advisory |
| http://www.iss.net/security_center/static/7185.php | Broken Link |
| http://www.securityfocus.com/bid/3371 | Broken LinkExploitThird Party AdvisoryVDB Entry |
| http://archives.neohapsis.com/archives/bugtraq/2001-09/0235.html | Broken LinkVendor Advisory |
| http://www.iss.net/security_center/static/7185.php | Broken Link |
| http://www.securityfocus.com/bid/3371 | Broken LinkExploitThird Party AdvisoryVDB Entry |
Track CVE-2001-1528 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
Source: NIST National Vulnerability Database (record CVE-2001-1528), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.
