<table cellspacing="0" cellpadding="0" border="0" ><tr><td valign="top" style="font: inherit;"><DIV>I installed nexpose Community Edition on Windows 2003 Server and Metasploit 3.3.3 version on the same machine. </DIV>
<DIV> </DIV>
<DIV>I get list of critical vulnerabilities on one of my internal Machine when I scanned using Nexpose Web gui. I used Metasploit console to scan the same IP and correlate with the existing exploit, using nexpose_Scan -x IP address, and it spits out an error as below. </DIV>
<DIV> </DIV>
<DIV>msf > nexpose_scan -x <IP address></DIV>
<DIV>[*] Scanning 1 addresses with template pentest-audit in sets of 32<BR>[*] Completed the scan of 1 addresses<BR>[*] Launching an automated exploitation session<BR>[-] Error while running command nexpose_scan: undefined local variable or method `minrank' for #<Msf::PlugiNexpose::NexposeCommandDispatcher:0x13561d08></DIV>
<DIV>Call stack:<BR>/msf3/plugins/nexpose.rb:362:in `cmd_nexpose_scan'<BR>/msf3/lib/rex/ui/text/dispatcher_shell.rb:235:in `run_command'<BR>/msf3/lib/rex/ui/text/dispatcher_shell.rb:197:in `block in run_single'<BR>/msf3/lib/rex/ui/text/dispatcher_shell.rb:192:in `each'<BR>/msf3/lib/rex/ui/text/dispatcher_shell.rb:192:in `run_single'<BR>/msf3/lib/msf/ui/console/driver.rb:347:in `run_single'<BR>/msf3/lib/rex/ui/text/shell.rb:144:in `run'<BR>msfconsole:92:in `<main>'<BR>msf > <BR>msf > <BR></DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>If I scan the IP without -x option and then run the command then I get following . </DIV>
<DIV>Metasploit finds none of the exploit matching the list of vulnerability.</DIV>
<DIV>There are only 2 options, Option 1: Rapid 7 is giving out false positive. Option 2: Metasploit do not have the corrposponding exploit. </DIV>
<DIV> </DIV>
<DIV>Metasploit is upgraded. </DIV>
<DIV>msf > db_autopwn -t -x <BR>[*] Analysis completed in 6 seconds (0 vulns / 0 refs)<BR>[*] <BR>[*] ================================================================================<BR>[*] Matching Exploit Modules<BR>[*] ================================================================================<BR>[*] ================================================================================<BR>[*] <BR>[*] </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV></td></tr></table><br>