CVE-2002-0748

LabVIEW Web Server 5.1.1-6.1 - Denial of Service via Malformed HTTP GET Request

Title source: llm

Exploitation Summary

EIP tracks 2 public exploits for CVE-2002-0748. PoCs published by Steve Zins, fauzanwijaya.

AI-analyzed exploit summary This exploit targets a vulnerability in National Instruments LabVIEW's HTTP server by sending a malformed HTTP GET request terminated with two newline characters instead of the standard carriage return/newline combination, causing the server to crash.

Description

LabVIEW Web Server 5.1.1 through 6.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET request that ends in two newline characters, instead of the expected carriage return/newline combinations.

Exploits (2)

exploitdb WORKING POC VERIFIED

by Steve Zins · textdosmultiple

https://www.exploit-db.com/exploits/21413

View Code ZIP pw:eip

This exploit targets a vulnerability in National Instruments LabVIEW's HTTP server by sending a malformed HTTP GET request terminated with two newline characters instead of the standard carriage return/newline combination, causing the server to crash.

Classification

Working Poc 90%

Attack Type

Dos

Complexity

Trivial

Reliability

Reliable

Target: National Instruments LabVIEW (Linux and Windows versions)

No auth needed

Prerequisites: Network access to the LabVIEW HTTP server

MITRE ATT&CK

T1499 - Endpoint Denial of Service

mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

nomisec WORKING POC

by fauzanwijaya · poc

https://github.com/fauzanwijaya/CVE-2002-0748

View Code ZIP pw:eip

The repository contains a functional Python script that exploits CVE-2002-0748, a denial-of-service vulnerability in the LabVIEW Web Server. The exploit sends a malformed HTTP request ending with two LF characters instead of the standard CR LF CR LF sequence, causing the server to crash.