Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Nessus reports almost on any Windows machine "DCE service enumaration". With the metasploit module tcp_dcerpc_auditor I get the following information:

192.168.1.23 - UUID 99fcfec4-5260-101b-bbcb-00aa0021347a 0.0 OPEN VIA 135 ACCESS GRANTED 0000000somelongnumber0000
192.168.1.23 - UUID afa8bd80-7d8a-11c9-bef4-08002b102989 1.0 OPEN VIA 135 ACCESS GRANTED 00000somelongnumber0000

In the nessus finding it says it could be used for information gathering. But how exactly? Is there a way to use the UUID?

share|improve this question

1 Answer 1

up vote 2 down vote accepted

Check this out. An attacker can see what services are running on the machine. This information can be very useful for planning and launching an attack.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.