Unscored severity · published Apr 22, 2008
CVE-2008-1902
The GUI for aptlinex before 0.91 does not sufficiently warn the user of potentially dangerous actions, which allows remote attackers to remove or modify packages via an apt:// URL
–
CVSS
1%
EPSS
No
On KEV
Description
The GUI for aptlinex before 0.91 does not sufficiently warn the user of potentially dangerous actions, which allows remote attackers to remove or modify packages via an apt:// URL.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AP
Aptlinex · Debian
0.6-1; 0.7-1; 0.8-1; 0.8-2; 0.9-1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-1902
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-1902
bugs.debian.org
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476572
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/41954
More from Aptlinex
–
CVE-2008-1901
aptlinex before 0.91 allows local users to overwrite arbitrary files via a symlink attack on the gambas-apt.lock temporary file