CVE-2008-1902: Medium severity debian aptlinex vulnerability
Published Apr 21, 2008
·Updated
The GUI for aptlinex before 0.91 does not sufficiently warn the user of potentially dangerous actions, which allows remote attackers to remove or modify packages via an apt:// URL.
Affected Software
5 affected components
Debian Aptlinex=0.9-1
Debian Aptlinex=0.8-2
Debian Aptlinex=0.8-1
Debian Aptlinex=0.6-1
Debian Aptlinex=0.7-1
Event History
Apr 21, 2008
CVE Published
via MITRE·10:10 PM
Data Sourced
via MITRE·10:10 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-1902?
CVE-2008-1902 is considered a medium severity vulnerability due to its ability to allow remote attackers to modify or remove packages.
2
How do I fix CVE-2008-1902?
To fix CVE-2008-1902, upgrade to aptlinex version 0.91 or later, where the issue has been addressed.
3
What action allows exploitation of CVE-2008-1902?
Exploitation of CVE-2008-1902 occurs when a user is misled into executing a dangerous action via an apt:// URL without sufficient warnings.
4
Which versions of aptlinex are affected by CVE-2008-1902?
Versions 0.6-1, 0.7-1, 0.8-1, 0.8-2, and 0.9-1 of aptlinex are all vulnerable to CVE-2008-1902.
5
What does CVE-2008-1902 allow attackers to do?
CVE-2008-1902 allows remote attackers to potentially remove or modify packages on the user's system.