alert tcp $EXTERNAL_NET $HTTP_PORTS -> $HOME_NET any (msg:"ET CURRENT_EVENTS Rising Online Scanner Insecure Method Vulnerability"; flow:to_client,established; content:"clsid"; nocase; content:"E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153"; nocase; content:"UpdateEngine"; nocase; content:"0000$0000$0000"; classtype:web-application-attack; reference:bugtraq,27997; reference:url,www.milw0rm.com/exploits/5188; sid:2007888; rev:1;)

Added 2008-02-27 12:14:31 UTC