A few boot repair CDs are out there but no legitimate XP CDs are downloadable.

It's been proposed as a great way to send out rootkits or worse is to put such into said downloads.

But to answer your question. The version must match since the CD KEY used for a XP SP1 CD does not work for a XP SP2 CD.