Boot to the rescue CD, mount the RHEL 4 installation (meaning the drive or partition it's installed on) somewhere, chroot to that directory, then do passwd root. Reboot to the hard drive and see if that works.