CVE-2001-1528

CVE-2001-1528 describes an information leakage vulnerability in the AmTote International homebet program. Attackers can differentiate between invalid account numbers and incorrect PINs based on distinct error messages, enabling brute-force attacks to identify valid account numbers. With a CVSS score of 5.0 (Medium), this vulnerability is remotely exploitable with low attack complexity, potentially leading to unauthorized disclosure of account existence. While not listed in CISA's KEV catalog, an ExploitDB entry (EDB-21116) exists for an account information brute-force attack, though there is no evidence of active exploitation or significant community discussion.