CVE-2008-1902

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-04-22 · updated 2026-06-16

Description

The GUI for aptlinex before 0.91 does not sufficiently warn the user of potentially dangerous actions, which allows remote attackers to remove or modify packages via an apt:// URL.

Affected products

Debian Aptlinex: 0.6-1, 0.7-1, 0.8-1, 0.8-2, 0.9-1

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476572
https://exchange.xforce.ibmcloud.com/vulnerabilities/41954
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476572
https://exchange.xforce.ibmcloud.com/vulnerabilities/41954

Get alerted when CVE-2008-1902 or the next vulnerability affects your stack