Security Basics mailing list archives

RE: password protection in office XP documents


From: "matt willson" <mwillson () sbcglobal net>
Date: Mon, 16 Jun 2003 16:06:03 -0700

Common known flaw with microsoft, and their program recognizing by file
extension method, is that if you rename a file (by right clicking the
file and hititng rename)blah.doc into blah.html then choosing the
program to open it up with, you have got a bypass.


-----Original Message-----
From: John Benstead [mailto:jjbenstead () msn com] 
Sent: Sunday, June 15, 2003 4:15 PM
To: security-basics () securityfocus com
Subject: Re: password protection in office XP documents

In-Reply-To: <003b01c331c8$3e992530$6f01a8c0@Laptop1>

Unless you know something that I don't (and that could be the case), you

will need the password for the document in order to open the document
and 
then save as an HTML.

------------------------------------------------------------------------
---
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top
analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access
in
about an hour, with no client, server changes, or ongoing maintenance.
          
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
------------------------------------------------------------------------
----


---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.
          
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------


Current thread: