Oops, that should've been passwd root (kind of weird, I think, and different from Linux). And running passwd as root never asks you for the old one, at least on any system I've seen.