# A security vulnerability has been found in mod\_watch

**URL:** <https://forums.interworx.com/t/a-security-vulnerability-has-been-found-in-mod-watch/14065>\
**Category:** Bugs\
**Tags:** mod\_watch, vulnerability\
**Created:** [September 3, 2016, 9:01am UTC](https://forums.interworx.com/t/a-security-vulnerability-has-been-found-in-mod-watch/14065 "2016-09-03T09:01:58Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![IWorx-Nathan](https://forums.interworx.com/letter_avatar_proxy/v4/letter/i/9de0a6/32.png) [@IWorx-Nathan](https://forums.interworx.com/u/IWorx-Nathan)\
**Post date:** [September 3, 2016, 9:01am UTC](https://forums.interworx.com/t/a-security-vulnerability-has-been-found-in-mod-watch/14065/1 "2016-09-03T09:01:58Z")

</div>

A security vulnerability has been found in mod\_watch. At this time we have no evidence that this vulnerability has been exploited and we have released a new mod\_watch rpm that disables mod\_watch. Unfortunately, this will prevent bandwidth calculation until a patch is available.

```auto
[root@nate3 ~]# yum update mod_watch
[root@nate3 ~]# rpm -q mod_watch
mod_watch-4.3-105.rhe6x.iworx.p1.ru.x86_64

```

---

<div class="post-metadata">

**Author:** ![d2d4j](https://forums.interworx.com/user_avatar/forums.interworx.com/d2d4j/32/16_2.png) [@d2d4j](https://forums.interworx.com/u/d2d4j)\
**Post date:** [September 3, 2016, 9:15am UTC](https://forums.interworx.com/t/a-security-vulnerability-has-been-found-in-mod-watch/14065/2 "2016-09-03T09:15:51Z")

</div>

Hi Nathan  
Many thanks, glad your keeping on top of security  
I SSH into 2 servers and ran the update, but it could not find any updates  
I then logged into nodeworx, changed IW to Release Candidate, which it found the following  
mod\_watch – Bandwidth accounting for Apache 4.3 [105.rhe6x.iworx.p1.ru](http://105.rhe6x.iworx.p1.ru) interworx-stable 2016-09-03 17:10:46  
Updated  
Is this now patched  
Many thanks  
John

---

<div class="post-metadata">

**Author:** ![IWorx-Nathan](https://forums.interworx.com/letter_avatar_proxy/v4/letter/i/9de0a6/32.png) [@IWorx-Nathan](https://forums.interworx.com/u/IWorx-Nathan)\
**Post date:** [September 3, 2016, 12:01pm UTC](https://forums.interworx.com/t/a-security-vulnerability-has-been-found-in-mod-watch/14065/3 "2016-09-03T12:01:55Z")

</div>

The patched version was just released. This update also re-enabled mod\_watch.

[root@nate3 ~]# rpm -q mod\_watch  
mod\_watch-4.3-106.rhe6x.iworx.p1.ru.x86\_64

---

<div class="post-metadata">

**Author:** ![d2d4j](https://forums.interworx.com/user_avatar/forums.interworx.com/d2d4j/32/16_2.png) [@d2d4j](https://forums.interworx.com/u/d2d4j)\
**Post date:** [September 3, 2016, 1:05pm UTC](https://forums.interworx.com/t/a-security-vulnerability-has-been-found-in-mod-watch/14065/4 "2016-09-03T13:05:11Z")

</div>

Hi Nathan

Many thanks

I suspect there maybe other uses on stable, who patch and is unpatched on next IW update

I will check tommorow but I do not think our respositories have been updated yet

Many thanks and you guys rock

John

---

<div class="post-metadata">

**Author:** ![d2d4j](https://forums.interworx.com/user_avatar/forums.interworx.com/d2d4j/32/16_2.png) [@d2d4j](https://forums.interworx.com/u/d2d4j)\
**Post date:** [September 4, 2016, 2:36am UTC](https://forums.interworx.com/t/a-security-vulnerability-has-been-found-in-mod-watch/14065/5 "2016-09-04T02:36:57Z")

</div>

Hi Nathan  
Patch now available in respositories, and installed without issue.  
Many thanks  
John