PT-2001-2613 · Amtote International · Amtote International Homebet

Published 2001-12-31 · Updated 2024-02-14 · CVE-2001-1528

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions AmTote International homebet program (affected versions not specified)

Description The issue allows remote attackers to determine the existence of valid account numbers via a brute force attack by analyzing different error messages returned for invalid account numbers and PIN codes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Side Channel Attack

Weakness Enumeration

CWE-203

Related Identifiers

CVE-2001-1528

Affected Products

Amtote International Homebet

References · 5

• 🔥 https://exploit-db.com/exploits/21116 · Exploit
• 🔥 http://securityfocus.com/bid/3371 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-1528 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2001-09/0235.html · Vendor Advisory
• http://iss.net/security_center/static/7185.php · Note