Comment 7 for bug 210352

The link worked fine for me within virtualbox. Note that it's version specific, so that file only applies when using Intrepid.

I think the best solution would be to have a package such as virtualbox-ose-additions (that was Suggests in virtualbox-ose), and when running the program and the iso is not found, the dialog box can trigger apt to install this package.