alert http $EXTERNAL_NET $HTTP_PORTS -> $HOME_NET any (msg:"ET ACTIVEX JuniperSetup Control Buffer Overflow"; flow:established,to_client; file.data; content:"E5F5D008-DD2C-4D32-977D-1A0ADF03058B"; fast_pattern; nocase; pcre:"/param[^>]*name\s*=\s*["']?productname["']?[^>]*\s+value\s*=\s*(['"])((?!\1).|\\['"]){200}/Ri"; reference:url,www.eeye.com/html/research/advisories/AD20060424.html; classtype:attempted-user; sid:2002889; rev:10; metadata:created_at 2010_07_30, confidence High, signature_severity Major, updated_at 2024_04_11;)