medium5.0Public exploit code
CVE-2001-1170
AmTote International homebet program stores the homebet.log file in the homebet/ virtual directory, which allows remote attackers to steal account and PIN numb…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- AmTote Homebet - World Accessible Log2001-09-28 · remote · multiple · Verified
Impact
AmTote International homebet program stores the homebet.log file in the homebet/ virtual directory, which allows remote attackers to steal account and PIN numbers.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amtote International | Homebet | All versions |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2001-09/0235.html
- http://www.securityfocus.com/bid/3370
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7186
- http://archives.neohapsis.com/archives/bugtraq/2001-09/0235.html
- http://www.securityfocus.com/bid/3370
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7186