CVEvulnerability

CVE-2001-1528

5.0 MEDIUM Published 2001-12-31 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2001-12-31
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses: CWE-203

Description

AmTote International homebet program returns different error messages when invalid account numbers and PIN codes are provided, which allows remote attackers to determine the existence of valid account numbers via a brute force attack.

Affected configurations

• amtote homebet

Weakness · CWE (1)

CWE-203 Observable Discrepancy weakness

Referenced by CWE · observed example (3)

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
CWE-203 Observable Discrepancy weakness
CWE-204 Observable Response Discrepancy weakness

References

http://archives.neohapsis.com/archives/bugtraq/2001-09/0235.html Broken Link, Vendor Advisory
http://www.iss.net/security_center/static/7185.php Broken Link
http://www.securityfocus.com/bid/3371 Broken Link, Exploit, Third Party Advisory, VDB Entry
http://archives.neohapsis.com/archives/bugtraq/2001-09/0235.html Broken Link, Vendor Advisory
http://www.iss.net/security_center/static/7185.php Broken Link
http://www.securityfocus.com/bid/3371 Broken Link, Exploit, Third Party Advisory, VDB Entry