Thanks for the info guys.

James - I have notified Redhat (thanks again for the contact details);
Harry - I forwarded your solution to USCERT (citing you as reference) as they have put this vulnerability note up :
http://www.kb.cert.org/vuls/id/632656


Regards,
Ben.