Read the docs
TI-2001-00808 Aliases CVE-2001-0845GHSA-83pj-9hmm-7pxf

Vulnerability in DECwindows Motif Server on OpenVMS VAX or Alpha 6.2 through 7.3, and…

Priority LOW 21Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Vulnerability in DECwindows Motif Server on OpenVMS VAX or Alpha 6.2 through 7.3, and SEVMS VAX or Alpha 6.2, allows local users to gain access to unauthorized resources.

Why it matters now

EPSS 0.00358 29th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 11

CPEVersionsRoleVendor
cpe:2.3:a:dec:dec_openvms:6.2_vax:*:*:*:*:*:*:*6.2_vaxVulnerableDec
cpe:2.3:a:dec:dec_openvms:7.1_vax:*:*:*:*:*:*:*7.1_vaxVulnerableDec
cpe:2.3:a:dec:dec_openvms:7.2_vax:*:*:*:*:*:*:*7.2_vaxVulnerableDec
cpe:2.3:a:dec:dec_openvms:7.3_vax:*:*:*:*:*:*:*7.3_vaxVulnerableDec
cpe:2.3:a:dec:dec_openvms_alpha:6.2:*:*:*:*:*:*:*6.2VulnerableDec
cpe:2.3:a:dec:dec_openvms_alpha:7.1.2:*:*:*:*:*:*:*7.1.2VulnerableDec
cpe:2.3:a:dec:dec_openvms_alpha:7.2.1h1:*:*:*:*:*:*:*7.2.1h1VulnerableDec
cpe:2.3:a:dec:dec_openvms_alpha:7.2.2:*:*:*:*:*:*:*7.2.2VulnerableDec
cpe:2.3:a:dec:dec_openvms_alpha:7.3:*:*:*:*:*:*:*7.3VulnerableDec
cpe:2.3:a:dec:sevms:6.2:*:*:*:*:*:*:*6.2VulnerableDec
  • cpe:2.3:a:dec:dec_openvms:6.2_vax:*:*:*:*:*:*:* Versions 6.2_vax Vulnerable ·Dec
  • cpe:2.3:a:dec:dec_openvms:7.1_vax:*:*:*:*:*:*:* Versions 7.1_vax Vulnerable ·Dec
  • cpe:2.3:a:dec:dec_openvms:7.2_vax:*:*:*:*:*:*:* Versions 7.2_vax Vulnerable ·Dec
  • cpe:2.3:a:dec:dec_openvms:7.3_vax:*:*:*:*:*:*:* Versions 7.3_vax Vulnerable ·Dec
  • cpe:2.3:a:dec:dec_openvms_alpha:6.2:*:*:*:*:*:*:* Versions 6.2 Vulnerable ·Dec
  • cpe:2.3:a:dec:dec_openvms_alpha:7.1.2:*:*:*:*:*:*:* Versions 7.1.2 Vulnerable ·Dec
  • cpe:2.3:a:dec:dec_openvms_alpha:7.2.1h1:*:*:*:*:*:*:* Versions 7.2.1h1 Vulnerable ·Dec
  • cpe:2.3:a:dec:dec_openvms_alpha:7.2.2:*:*:*:*:*:*:* Versions 7.2.2 Vulnerable ·Dec
  • cpe:2.3:a:dec:dec_openvms_alpha:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·Dec
  • cpe:2.3:a:dec:sevms:6.2:*:*:*:*:*:*:* Versions 6.2 Vulnerable ·Dec
Show 1 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:dec:sevms_alpha:6.2:*:*:*:*:*:*:*6.2VulnerableDec
  • cpe:2.3:a:dec:sevms_alpha:6.2:*:*:*:*:*:*:* Versions 6.2 Vulnerable ·Dec

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2001-0845
  2. 2026-10-03 Alias added: GHSA-83pj-9hmm-7pxf

References

Patch 1

  • TI-1999-01342 Vulnerability in Monitor utility (SYS$SHARE:SPISHR.EXE) in VMS 5.0 through 5.4-2 allows local users to gain privileges. CVSS 2.0HIGH 7.2
  • TI-1999-01262 Vulnerabilities in DECnet/OSI for OpenVMS before 5.8 on DEC Alpha AXP and VAX/VMS systems… CVSS 2.0MEDIUM 4.6

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences