add default service mapping to imports

[jmartin-tech]

When importing hosts details from external sources, the vendors sometimes do not provide linking between vulnerabilities and services exposed on a host.

This change attempts to fill that gap by connecting any reported vulnerability without service to reported a service when an existing metasploit module references the same vulnerability and reports default ports the service may be running on. This is prone to possible false mapping, however this change only attempt so fill in gaps. This in my opinion make it a reasonable post processing task.

Verification

• Start msfconsole
• db_import <test_file_path>.xml
• vulns -p 445
• Verify the CVE-2017-0146 vulnerability reported in the sample export attached is mapped to exposed port 445 on the host imported.

m3_report.xml.zip

[busterb]

msf5 auxiliary(scanner/snmp/snmp_login) > vulns -p 445

Vulnerabilities
===============

Timestamp                Host            Name                        References
---------                ----            ----                        ----------
2018-12-07 03:03:12 UTC  192.168.18.118  SMB signing disabled        URL-http://blogs.technet.com/b/josebda/archive/2010/12/01/the-basics-of-smb-signing-covering-both-smb1-and-smb2.aspx,NEXPOSE-cifs-smb-signing-disabled
2018-12-07 03:03:12 UTC  192.168.18.118  SMB signing not required    URL-http://blogs.technet.com/b/josebda/archive/2010/12/01/the-basics-of-smb-signing-covering-both-smb1-and-smb2.aspx,NEXPOSE-cifs-smb-signing-not-required
2018-12-07 03:03:12 UTC  192.168.18.118  SMBv2 signing not required  URL-https://blogs.technet.com/b/josebda/archive/2010/12/01/the-basics-of-smb-signing-covering-both-smb1-and-smb2.aspx,NEXPOSE-cifs-smb2-signing-not-required

[busterb]

Release Notes

When vulnerabilities are imported from an external scanner, Metasploit will now automatically link a vulnerability to a service port if there is a known module that connects the two. This allows an inferred service-to-vulnerability mapping even when the external scanner did not specify service information.