Red Hat vulnerabilities

Red Hat 6.0 allows local users to gain root access by booting single user and hitting ^C at the password prompt.

A Red Hat installation uses DES password encryption with crypt() for the initial password instead of md5.

In Red Hat 2.1, the abuse.console tool uses relative pathnames to locate and execute the undrv program, allowing local users to execute arbitrary commands via a path pointing to a Trojan horse program.