I was running a vulnerability scan against a Windows Server of mine, TCP port 135. I got the following output:
By sending a Lookup request to the portmapper TCP 135 it was possible to enumerate the Distributed Computing Environment services running on the remote port. Using this information it is possible to connect and bind to each service by sending an RPC request to the remote port/pipe.
So now I have the following questions:
- How can someone connect and bind to each service? What is the command/tool to use, and does it require authentication?
- What are the security risks of having this service running, if any?