CVE-2002-0748 PoC — LabVIEW Web Server服务拒绝漏洞

Source

https://github.com/fauzanwijaya/CVE-2002-0748

Associated Vulnerability

Title:LabVIEW Web Server服务拒绝漏洞 (CVE-2002-0748)
Description:LabVIEW Web Server 5.1.1 through 6.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET request that ends in two newline characters, instead of the expected carriage return/newline combinations.

Description

Proof of concept for LabVIEW Web Server HTTP Get Newline DoS vulnerability

Readme

## Synopsis
(G)old exploit - the remote web server is prone to a denial of service attack.

## Description
It was possible to kill the web server by sending a request that ends with two LF characters instead of the normal sequence CR LF CR LF (CR = carriage return, LF = line feed).

An attacker can exploit this vulnerability to make this server and all LabView applications crash.

## Gleen Research Center | NASA - LabVIEW Web Server DoS Vulnerability
![image](https://github.com/fauzanwijaya/CVE-2002-0748/assets/139438257/3c105c01-7bef-4ad2-8755-8930eaaefa97)

## Solution
Upgrade your LabView software or run the web server with logging disabled.

## References
https://seclists.org/bugtraq/2002/Apr/334

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!