Apple today posted a new security update for Mac OS X Server, which “updates Apache 2.0.45 to 2.0.46 and addresses a security hole in the mod_dav module that could be exploited remotely causing an Apache Web server process to crash. In addition, this update prevents the exposure of a user’s password when using the dsimportexport tool. Apache 1.3 is unaffected and is the primary Web server on Mac OS X Server. Apache 2.0 is installed with Mac OS X Server, but off by default.”