I did a vulnerability scan on a machine and found a DCE Services Enumeration vulnerability. This is described as:
Distributed Computing Environment (DCE) services running on the remote host can be enumerated by connecting on port 135 and doing the appropriate queries.
An attacker may use this fact to gain more knowledge about the remote host.
My question is: Other than a typical banner grab/service enumeration with nmap like:
nmap -sV -sT <ip>
how can I actually enumerate services with this vulnerability?