alert http $EXTERNAL_NET any -> $HOME_NET 8080 (msg:"ET EXPLOIT VLC web interface buffer overflow attempt"; flow:established,to_server; http.uri; content:"|2f|requests|2f|status|2e|xml|3f|"; fast_pattern; nocase; content:"input|3d|smb|3a 2f|"; nocase; pcre:"/\x2Frequests\x2Fstatus\x2Exml\x3F[^\x0A\x0D]*input\x3D[^\x0A\x0D\x26\x3B]{1000}/i"; reference:url,milw0rm.org/exploits/9029; classtype:web-application-attack; sid:2009511; rev:8; metadata:created_at 2010_07_30, confidence High, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_03_16;)