Cumin (aka MRG Management Console) as used in Red Hat Enterprise MRG 2.5 allows attackers with certain database privileges to cause a denial of service (inaccessible page) via a non-ASCII character in the name of a link.