SonicALERT
Search

Sonicwall Signatures

 

Go to All Categories list.


  GDB -- TCP Activity (Remote Mode)

Category: REMOTE-DEBUG      

GDB offers a "remote" mode often used when debugging embedded systems. Remote operation is when GDB runs on one machine and the program being debugged runs on another. GDB can communicate to the remote "stub" that understands GDB protocol through a serial device or TCP/IP. A stub program can be created by linking to the appropriate stub files provided with GDB, which implement the target side of the communication protocol. Alternatively, gdbserver can be used to remotely debug the program without needing to change it in any way. This SonicWall signature identifies legitimate GDB Remote application traffic.

References
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2419


Relevant Information