Security Basics mailing list archives

Re: password protection in office XP documents


From: Leif Gregory <leifg () doh state nm us>
Date: Tue, 17 Jun 2003 08:18:27 -0600

Hello matt,

Monday, June 16, 2003, 5:06:03 PM, you wrote:
mw> Common known flaw with microsoft, and their program recognizing by
mw> file extension method, is that if you rename a file (by right
mw> clicking the file and hititng rename)blah.doc into blah.html then
mw> choosing the program to open it up with, you have got a bypass.

A bypass to what? Renaming the original.doc to a .html extension
doesn't change the file type. Try it. Save a Word document, change the
extension to .html, and open it in your favorite plaintext editor. Not
much you can do with it there. Now open that same .html file in Word,
and MS Word correctly identifies it as a Word document by its header
(even though it has a .html extension), and the document protections
still apply.


-- 
Leif Gregory




---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.
          
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------


Current thread: