Microsoft Windows SMB Service Enumeration via \srvsvc
Medium Nessus Plugin ID 18585
SynopsisThe remote host allows null session enumeration of running services.
DescriptionThis plugin connects to \srvsvc (instead of \svcctl) to enumerate the list of services running on the remote host on top of a NULL session.
An attacker may use this feature to gain better knowledge of the remote host.
SolutionInstall the Update Rollup Package 1 (URP1) for Windows 2000 SP4.