RE: password protection in office XP documents

["news.ajanas" <news.ajanas () cox net>]

I don't see how that works either. Lets do it 1 step at a time

1) make file blah.doc, tools - options - security - password, save as
blah.doc
2) right click, rename to blah.html 

***Here is where I get lost***
3)open it with word (it asks for password no good)
        open it with notepad or html editor (no good either)

So my question is what do you open the file with or what do you do to
the file to open it?

I know there are a bunch of apps out there that will do pass cracking on
zip, docs and other files but it sounded like there was something easy
out there....please don't leave me hanging!! I must know!!


Big thnx




-----Original Message-----
From: matt willson [mailto:mwillson () sbcglobal net] 
Sent: Monday, June 16, 2003 4:06 PM
To: 'John Benstead'; security-basics () securityfocus com
Subject: RE: password protection in office XP documents


Common known flaw with microsoft, and their program recognizing by file
extension method, is that if you rename a file (by right clicking the
file and hititng rename)blah.doc into blah.html then choosing the
program to open it up with, you have got a bypass.


-----Original Message-----
From: John Benstead [mailto:jjbenstead () msn com] 
Sent: Sunday, June 15, 2003 4:15 PM
To: security-basics () securityfocus com
Subject: Re: password protection in office XP documents

In-Reply-To: <003b01c331c8$3e992530$6f01a8c0@Laptop1>

Unless you know something that I don't (and that could be the case), you

will need the password for the document in order to open the document
and 
then save as an HTML.

------------------------------------------------------------------------
---
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top
analysts! The Gartner Group just put Neoteris in the top of its Magic
Quadrant, while InStat has confirmed Neoteris as the leader in
marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access
in about an hour, with no client, server changes, or ongoing
maintenance.
          
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
------------------------------------------------------------------------
----


------------------------------------------------------------------------
---
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top
analysts! The Gartner Group just put Neoteris in the top of its Magic
Quadrant, while InStat has confirmed Neoteris as the leader in
marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access
in about an hour, with no client, server changes, or ongoing
maintenance.
          
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
------------------------------------------------------------------------
----



---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.
          
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------