alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET GAMES PunkBuster Server webkey Buffer Overflow"; flow:established,to_server; http.uri; content:"/pbsvweb"; fast_pattern; nocase; content:"webkey="; nocase; isdataat:500,relative; content:!"|0a|"; within:500; content:!"&"; within:500; reference:url,aluigi.altervista.org/adv/pbwebbof-adv.txt; classtype:attempted-admin; sid:2002947; rev:8; metadata:created_at 2010_07_30, confidence High, signature_severity Informational, updated_at 2024_03_17;)