Description
Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, allows attackers with certain database privileges to cause a denial of service (inaccessible page) via a non-ASCII character in the name of a link.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat MRG 2 | cumin | 0.1.5796-4.el5_9 | RHSA-2014:0859, RHSA-2014:0858 |
Advisories 2
- RHSA-2014:0859 Red Hat Security Advisory: Red Hat Enterprise MRG 2.5 Messaging and Grid security update Red Hat Security Advisories (RHSA) · Nov 22, 2025
- RHSA-2014:0858 Red Hat Security Advisory: Red Hat Enterprise MRG 2.5 Messaging and Grid security update Red Hat Security Advisories (RHSA) · Nov 22, 2025
References
- RHSA-2014:0858 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=830254
- RHSA-2014:0859 vendor-advisory