RedHat Linux 6.0 - Single User Mode Authentication

Author: Darren Reed
type: local
platform: linux
port: 
date_added: 2000-02-23 
date_updated: 2012-07-12 
verified: 1 
codes: CVE-2000-0219;OSVDB-13637 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/1005/info

A vulnerability exists in the manner in which RedHat Linux 6.0 protects the obtaining of a shell by booting single user mode. RedHat will prompt for the root password upon entering single user mode. Pressing ^C (causing a SIGINT to be sent) immediately results in a root shell being made available.

boot single user from lilo, and press ^C (control-C)