This script is Copyright (C) 2010-2014 Tenable Network Security, Inc.
The remote host has a remote code execution vulnerability.
The version of SharePoint Server 2007 running on the remote host has
a remote code execution vulnerability. The Document Conversions
Launcher Service does not properly validate SOAP requests before
A remote attacker could exploit this by submitting a specially crafted
SOAP request, resulting in arbitrary code execution in the security
context of a guest account.
See also :
Microsoft has released a set of patches for SharePoint Server 2007.
Risk factor :
High / CVSS Base Score : 7.5
CVSS Temporal Score : 6.2
Public Exploit Available : true