Updated Sp2.cat Available to Resolve Versioning Issues with Post Service Pack 1 Hotfixes (281767)



The information in this article applies to:

  • Microsoft Windows 2000 Server SP1
  • Microsoft Windows 2000 Advanced Server SP1
  • Microsoft Windows 2000 Professional SP1

This article was previously published under Q281767

SYMPTOMS

Under certain circumstances, the Windows 2000 post-Service Pack 1 (SP1) catalog file (Sp2.cat) that is included with Windows 2000 post-SP1 hotfixes may be incorrectly versioned. All Windows 2000 post-SP1 hotfixes that had this problem have been repackaged to include an updated Sp2.cat file.

If multiple Windows 2000 post-SP1 hotfixes are installed on your computer and one hotfix has this Sp2.cat versioning issue, your computer may be affected. Depending on the order in which the hotfixes were installed, a newer hotfixed Sp2.cat file may be replaced by an older version.

This problem occurs only with English-language hotfixes.

RESOLUTION

To resolve this problem, obtain the latest service pack for Windows 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

260910 How to Obtain the Latest Windows 2000 Service Pack

The resolution to this problem is a two-step process. In step 1, you install a tool that can help you verify if your computer is affected by this problem. In step 2, you install an updated Windows 2000 post-SP1 catalog file that protects your computer from this problem.

  1. Microsoft has released a tool that can help you verify if your computer is affected by this problem. This tool checks all Windows 2000 hotfixes that are installed on your computer to determine if any of your current hotfixes are affected. For additional information about this tool and how to install it, click the following article number to view the article in the Microsoft Knowledge Base:

    282784 Qfecheck.exe Verifies the Installation of Windows 2000 and Windows XP Hotfixes

  2. Install the updated Windows 2000 post-SP1 catalog file.
    • Windows 2000 SP1 includes an update that allows .cat files to be dynamically read when they are installed; therefore, you do not need to restart your computer after applying this package.

      If you are running Windows 2000 SP1, download the following file:
    • Windows 2000-based computers without SP1 read catalog information when the system is started. After you apply this package you are prompted to restart your computer.

      If you are not running Windows 2000 SP1, download the following file:
    For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

    119591 How to Obtain Microsoft Support Files from Online Services

    Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.
The English-language version of this fix should have the following file attributes or later:
   Date        Time    Size     File name
   --------------------------------------
   12/14/2000  05:11a  626,702  Sp2.cat
				

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article. This problem was first corrected in Windows 2000 Service Pack 2.

MORE INFORMATION

Every Microsoft hotfix for Windows 2000 contains a catalog file. This catalog file contains the information that is used by the Windows File Protection feature to verify the files in the hotfix package. For Windows 2000 post-SP1 hotfixes, the file is named Sp2.cat. For additional information about the Windows File Protection feature, click the article number below to view the article in the Microsoft Knowledge Base:

222193 Description of the Windows 2000 Windows File Protection Feature

Hotfix catalog files are cumulative. The latest hotfix file contains information for all hotfixes that were created before it. This allows one version of the file to be installed while earlier hotfixed files continue to be valid.

This problem affects the following Microsoft Security Bulletin fixes that are referenced on the following Microsoft Web site:
  • Security bulletin: Microsoft Knowledge Base article:

    262694 Malicious User Can Shut Down Computer Browser Service

  • Security bulletin: Microsoft Knowledge Base article:

    267559 GET on HTR File Can Cause a "Denial of Service" or Enable Directory Browsing

  • Security bulletin: Microsoft Knowledge Base article:

    269239 NetBIOS Vulnerability May Cause Duplicate Name on the Network Conflicts

  • Security bulletin: Microsoft Knowledge Base article:

    267843 Windows 2000 Telnet Server Stops Responding After Binary Input

  • Security bulletin: Microsoft Knowledge Base article:

    269049 Registry-Invoked Programs Use Standard Search Path

  • Security bulletin: Microsoft Knowledge Base article:

    269523 Service Control Manager Named Pipe Impersonation Vulnerability

  • Security bulletin: Microsoft Knowledge Base article:

    269862 Patch Released for Canonicalization Error Issue

  • Security bulletin: Microsoft Knowledge Base article:

    256888 Internet Information Service may Return Source of Active Server Pages File

  • Security bulletin: Microsoft Knowledge Base article:

    273735 INFO: Fix List for the Microsoft Virtual Machine Build 3316

  • Security bulletin: Microsoft Knowledge Base article:

    260347 IIS 4: Fix for Cross-Site Scripting Issues

  • Security bulletin: Microsoft Knowledge Base article:

    272736 Windows 2000 Still Image Service Exposes User Elevation Vulnerability

  • Security bulletin: Microsoft Knowledge Base article:

    272303 RPC Server Service Stops Responding

  • Security bulletin: Microsoft Knowledge Base article:

    272743 HTML E-mail Link Transmits User Name and Password to Unauthorized Server

  • Security bulletin: Microsoft Knowledge Base article:

    270676 Users Might Gain Full Control of a System via the "Simplified Chinese IME State Recognition" Vulnerability

  • Security bulletin: Microsoft Knowledge Base article:

    266433 Patch for Numerous Vulnerabilities in the LPC Port System Calls

  • Security bulletin: Microsoft Knowledge Base article:

    275526 INFO: Fix List for the Microsoft Virtual Machine Build 3318 and Associated Windows 2000 SP1 Hotfix

  • Security bulletin: Microsoft Knowledge Base article:

    273854 Denial of Service Can Occur with Microsoft NetMeeting

  • Security bulletin: Microsoft Knowledge Base article:

    274149 Cookies Are Not Marked as SSL-Secured in IIS

  • Security bulletin: Microsoft Knowledge Base article:

    277007 INFO: Fix List for the Microsoft Virtual Machine Build 3319 and Associated Windows 2000 SP1 Hotfix

  • Security bulletin: Microsoft Knowledge Base article:

    274835 Buffer Overflow in Network Monitor May Cause Vulnerability

  • Security bulletin: Microsoft Knowledge Base article:

    278499 Update Available for Indexing Service Vulnerability

  • Security bulletin: Microsoft Knowledge Base article:

    278511 Patch Available for ActiveX Parameter Validation Vulnerability

  • Security bulletin: Microsoft Knowledge Base article:

    277873 Patch for "Web Server File Request Parsing" Vulnerability

  • Security bulletin: Microsoft Knowledge Base article:

    274372 Patch Released for "Domain Account Lockout" Vulnerability


Modification Type:MinorLast Reviewed:9/26/2005
Keywords:kbHotfixServer kbQFE kbbug kbfix kbgraphxlinkcritical kbsetup kbWin2000PreSP2Fix KB281767