#alert tcp $EXTERNAL_NET $HTTP_PORTS -> $HOME_NET any (msg:"BLEEDING-EDGE EXPLOIT Internet Explorer Cryptomathic ActiveX? createPKCS10 Access"; flow:established,from_server; content:"CLSID"; nocase; content:"6DA9275C-64E5-42A1-879C-D90B5F0DC5B4"; distance:0; within:50; content:"createPKCS10"; nocase; distance:0; reference:cve,2006-1172; reference:bugtraq,17852; classtype:web-application-activity; sid:2002909; rev:2; )

Added 2007-05-04 17:00:20 UTC

#alert tcp $EXTERNAL_NET $HTTP_PORTS -> $HOME_NET any (msg:"BLEEDING-EDGE WEB CLIENT Internet Explorer Cryptomathic ActiveX? createPKCS10 Access"; flow:established,from_server; content:"CLSID"; nocase; content:"6DA9275C-64E5-42A1-879C-D90B5F0DC5B4"; distance:0; within:50; content:"createPKCS10"; nocase; distance:0; reference:cve,2006-1172; reference:bugtraq,17852; classtype:web-application-activity; sid:2002909; rev:1; )