SAP security note 1027100, "CST Patch Collection 08 2007". Below are the symptom and SAP recommended solution.
Description
Symptom
Errors encountered in the Client Server Technology area, including but not limited to:
- Dispatcher issues
- Task handler malfunctions
- Gateway and message server errors
- Problems with standalone enqueue server, ICM, and SAP Web Dispatcher
Solution
The patch collection provided in this note resolves the following errors:
Release 4.6D:
- 1020281: Trace message: sofcancel unblocked
Release 6.40:
- 1025489: JCMon may consume 100% CPU
- 1025488: JLaunch may crash during shutdown
- 1021425: Message server HTTP redirect changes URL query string
- 1020281: Trace message: sofcancel unblocked
- 1019719: Trace: "NiPGetPort: getsockname (22: Invalid argument)"
- 1018968: Enqueue replication server does not terminate after failover
- 978078: Maximum number of gateways reached
- 698017: ICM Patch Collection (6.40)
Release 7.00:
- 1025489: JCMon may consume 100% CPU
- 1025488: JLaunch may crash during shutdown
- 1021425: Message server HTTP redirect changes URL query string
- 1021205: Repeated debugging in SM50 does not work
- 1020281: Trace message: sofcancel unblocked
- 1018968: Enqueue replication server does not terminate after failover
- 1018109: Meaningless characters in table names of statistic
- 978078: Maximum number of gateways reached
- 974284: SAP Web Dispatcher 7.00: Patch history
- 851852: ICM Patch Collection (7.00)
Reason and prerequisites
The issues are caused by various errors in critical CST components such as the dispatcher, task handler, gateway, message server, enqueue server, ICM, and SAP Web Dispatcher.
References
- 1072557 – Vulnerabilities disclosed on July 5, 2007
- 1025489 – JCMon may consume 100% CPU
- 1025488 – JLaunch may crash during shutdown
- 1021425 – Message server HTTP redirect changes URL query string
- 1021205 – Multiple debugging from SM50 does not work
- 1020281 – Trace message: sofcancel unblocked
- 1018968 – Enqueue replication server does not terminate after failover
- 1018109 – Meaningless characters in table names of statistic
- 978078 – Maximum number of gateways reached
- 974284 – SAP Web Dispatcher 7.00: Patch history
- 851852 – ICM Patch Collection (7.00)
- 698017 – ICM Patch Collection (6.40)
Full note on SAP: SAP Support Launchpad note 1027100
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].



